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Welcome 

As  the  VP  of  Advanced  Designations  at  Kaplan  Schweser,  I am  pleased  to  have  the 
opportunity  to  help  you  prepare  for  the  2015  FRM®  Exam.  Getting  an  early  start  on 
your  study  program  is  important  for  you  to  sufficiently  Prepare  ► Practice  ► Perform® 
on  exam  day.  Proper  planning  will  allow  you  to  set  aside  enough  time  to  master  the 
learning  objectives  in  the  Part  I curriculum. 

Now  that  you've  received  your  SchweserNotes™,  here’s  how  to  get  started: 

Stepl:  Access  Your  Online  Tools 

Visitwww.schweser.com/frm  and  log  in  to  your  online  account  using  the  button 
located  in  the  top  navigation  bar.  After  logging  in,  select  the  appropriate  part  and 
proceed  to  the  dashboard  where  you  can  access  your  online  products. 

Step  2:  Create  a Study  Plan 

Create  a study  plan  with  the  Schweser  Study  Calendar  (located  on  the  Schweser 
dashboard).  Then  view  the  Schweser  Online  Resource  Library  on-demand  videos 
for  an  introduction  to  core  concepts. 

Step  3:  Prepare  and  Practice 

Read  your  SchweserNotes™ 

Our  clear,  concise  study  notes  will  help  you  prepare  for  the  exam.  At  the  end 
of  each  reading,  you  can  answer  the  Concept  Checker  questions  for  better 
understanding  of  the  curriculum. 

Attend  a Weekly  Class 

Attend  our  Online  Weekly  Class  or  review  the  on-demand  archives  as  often  as 
you  like.  Our  expert  faculty  will  guide  you  through  the  FRM  curriculum  with  a 
structured  approach  to  help  you  prepare  for  the  exam.  (See  our  instruction 
packages  to  the  right.  Visit  www.schweser.com/frm  to  order.) 

Practice  with  SchweserPro™  QBank 

Maximize  your  retention  of  important  concepts  and  practice  answering  exam- 
style  questions  in  the  SchweserPro™  QBank  and  taking  several  Practice  Exams. 
Use  Schweser’s  QuickSheet  for  continuous  review  on  the  go.  (Visit 
www.schweser.com/frm  to  order.) 

Step  4:  Final  Review 

A few  weeks  before  the  exam,  make  use  of  our  Online  Exam  Review  Workshop 
Package.  Review  key  curriculum  concepts  in  every  topic,  perform  by  working 
through  demonstration  problems,  and  practice  your  exam  techniques  with  our 
6-hour  live  Online  Exam  Review  Workshop.  Use  Schweser’s  Secret  Sauce®  for 
convenient  study  on  the  go. 

Step  5:  Perform 

As  part  of  our  Online  Exam  Review  Workshop  Package,  take  a Mock  Exam  to  ensure 
you  are  ready  to  perform  on  the  actual  FRM  exam.  Put  your  skills  and  knowledge  to 
the  test  and  gain  confidence  before  the  exam. 

Again,  thankyou  fortrusting  Kaplan  Schweser  with  your  FRM  exam  preparation! 

Sincerely, 

Tiw^ofksLf  Swabi/ 

Timothy  Smaby,  PhD,  CFA,  FRM 

Vice  President,  Advanced  Designations,  Kaplan  Schweser 
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Welcome  to  the  2015  SchweserNotes 


Thank  you  for  trusting  Kaplan  Schweser  to  help  you  reach  your  goals.  We  are  very  pleased 
to  be  able  to  help  you  prepare  for  the  Part  I FRM  exam.  In  this  introduction,  I want  to 
explain  the  resources  included  with  the  SchweserNotes,  suggest  how  you  can  best  use 
Schweser  materials  to  prepare  for  the  exam,  and  direct  you  toward  other  educational 
resources  you  will  find  helpful  as  you  study  for  the  exam. 

Besides  the  SchweserNotes  themselves,  there  are  many  educational  resources  available  at 
Schweser.com.  Just  log  in  using  the  individual  username  and  password  that  you  received 
when  you  purchased  the  SchweserNotes. 

SchweserNotes™ 

The  SchweserNotes™  consist  of  four  volumes  that  include  complete  coverage  of  all  FRM 
assigned  topic  areas  and  learning  objectives,  Concept  Checkers  (multiple-choice  questions 
for  every  topic),  and  Self-Test  questions  to  help  you  master  the  material  and  check  your 
progress. 

Online  Practice  Questions 

To  retain  what  you  learn,  it  is  important  that  you  quiz  yourself  often.  We  offer  an  online 
version  of  the  SchweserPro™  QBank,  which  contains  hundreds  of  Part  I practice  questions 
and  explanations.  Quizzes  are  available  for  each  topic  or  topic  area.  Build  your  own  exams 
by  specifying  the  topics  and  the  number  of  questions. 

Practice  Exams 

Schweser  offers  two  full  4-hour  practice  exams.  These  exams  are  important  tools  for  gaining 
the  speed  and  skills  you  will  need  to  pass  the  exam.  The  Practice  Exams  book  contains 
answers  with  full  explanations  for  self-grading  and  evaluation. 

Schweser  Study  Calendar 

Use  your  Online  Access  to  tell  us  when  you  will  start  and  what  days  of  the  week  you  can 
study.  The  online  Schweser  Study  Calendar  will  create  a study  plan  just  for  you,  breaking 
each  topic  area  into  daily  and  weekly  tasks  to  keep  you  on  track  and  help  you  monitor  your 
progress  through  the  curriculum. 
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The  Part  I FRM  exam  is  a formidable  challenge  (covering  66  assigned  readings  and  400+ 
learning  objectives),  and  you  must  devote  considerable  time  and  effort  to  be  properly 
prepared.  There  are  no  shortcuts!  You  must  learn  the  material,  know  the  terminology  and 
techniques,  understand  the  concepts,  and  be  able  to  answer  100  multiple  choice  questions 
quickly  and  (at  least  70%)  correctly.  250  hours  is  a good  estimate  of  the  study  time  required 
on  average,  but  some  candidates  will  need  more  or  less  time,  depending  on  their  individual 
backgrounds  and  experience. 

To  help  you  really  master  this  material  and  be  well  prepared  for  the  FRM  exam,  we  offer 
several  other  educational  resources,  including: 

Online  Weekly  Class 

Our  Online  Weekly  Class  is  offered  each  week,  beginning  in  February  for  the  May  exam 
and  August  for  the  November  exam.  This  online  class  brings  the  personal  attention  of  a 
classroom  into  your  home  or  office  with  30  hours  of  real-time  instruction,  led  by  either 
Dr.  John  Paul  Broussard,  CFA,  FRM  or  Dr.  Greg  Filbeck,  CFA,  FRM,  CAIA.  The  class 
offers  in-depth  coverage  of  difficult  concepts,  instant  feedback  during  lecture  and  Q&A 
sessions,  and  discussion  of  sample  exam  questions.  Archived  classes  are  available  for  viewing 
at  any  time  throughout  the  season.  Candidates  enrolled  in  the  Online  Weekly  Class  also 
have  full  access  to  supplemental  on-demand  video  instruction  in  the  Schweser  Online 
Resource  Library  and  an  e-mail  address  link  to  use  to  send  questions  to  the  instructor  at  any 
time. 

Late-Season  Review 

Late-season  review  and  exam  practice  can  make  all  the  difference.  Our  Review  Package 
helps  you  evaluate  your  exam  readiness  with  products  specifically  designed  for  late-season 
studying.  This  Review  Package  includes:  the  Online  Exam  Review  Workshop  (6-hour  live 
online  review  of  essential  curriculum  topics),  the  Mock  Exam  (one  4-hour  exam),  and 
Schwesers  Secret  Sauce  (concise  summary  of  the  FRM  curriculum). 
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Reading  Assignments  and 
Learning  Objectives 


The  following  material  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to 
address  the  learning  objectives  set  forth  by  the  Global  Association  of Risk  Professionals. 


Reading  Assignments 


Michel  Crouhy,  Dan  Galai,  and  Robert  Mark,  The  Essentials  of  Risk  Management,  2nd 
Edition  (New  York:  McGraw-Hill,  2014). 

1.  “Risk  Management:  A Helicopter  View,”  Chapter  1 (page  1) 

2.  “Corporate  Risk  Management:  A Primer,”  Chapter  2 (page  1 5) 

3.  “Corporate  Governance  and  Risk  Management,”  Chapter  4 (page  27) 

James  Lam,  Enterprise  Risk  Management:  From  Incentives  to  Controls,  2nd  Edition 
(Hoboken,  NJ:  John  Wiley  & Sons,  2014). 

4.  “What  is  ERM?,”  Chapter  4 (page  37) 

5.  “Implementing  Robust  Risk  Appetite  Frameworks  to  Strengthen  Financial  Institutions,” 

Institute  of  International  Finance,  June  2011.  (page  47) 

Steve  Allen,  Financial  Risk  Management:  A Practitioners  Guide  to  Managing  Market  and 
Credit  Risk,  2nd  Edition  (New  York:  John  Wiley  & Sons,  2013). 

6.  “Financial  Disasters,”  Chapter  4 (page  60) 

John  Hull,  Risk  Management  and  Financial  Institutions , 3rd  Edition  (New  York:  John 
Wiley  & Sons,  2012). 

7.  “The  Credit  Crisis  of  2007,”  Chapter  6 (page  77) 

8.  Rene  Stulz,  “Risk  Management  Failures:  What  are  They  and  When  Do  They  Happen?” 

Fisher  College  of  Business  Working  Paper  Series,  October  2008.  (page  88) 

Edwin  J.  Elton,  Martin  J.  Gruber,  Stephen  J.  Brown  and  William  N.  Goetzmann, 
Modem  Portfolio  Theory  and  Investment  Analysis,  9th  Edition  (Hoboken,  NJ:  John  Wiley 
& Sons,  2014). 

9.  “The  Standard  Capital  Asset  Pricing  Model,”  Chapter  13  (page  112) 

Noel  Amenc  and  Veronique  Le  Sourd,  Portfolio  Theory  and  Performance  Analysis 
(West  Sussex,  England:  John  Wiley  & Sons,  2003). 

10.  “Applying  the  CAPM  to  Performance  Measurement:  Single-Index  Performance 

Measurement  Indicators,”  Chapter  4,  Section  4.2  only  (page  127) 
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Reading  Assignments  and  Learning  Objectives 

Zvi  Bodie,  Alex  Kane,  and  Alan  J.  Marcus,  Investments , 10th  Edition  (New  York: 

McGraw-Hill,  2013). 

11.  “Arbitrage  Pricing  Theory  and  Multifactor  Models  of  Risk  and  Return,” 

Chapter  10  (page  137) 

Anthony  Tarantino  and  Deborah  Cernauskas,  Risk  Management  in  Finance:  Six  Sigma 
and  Other  Next  Generation  Techniques  (Hoboken,  NJ:  John  Wiley  & Sons,  2009). 

12.  “Information  Risk  and  Data  Quality  Management,”  Chapter  3 (page  151) 

13.  “Principles  for  Effective  Data  Aggregation  and  Risk  Reporting,”  (Basel  Committee  on 

Banking  Supervision  Publication,  January  2013).  (page  159) 

14.  GARP  Code  of  Conduct.  (page  171) 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


Risk  Management: 
A Helicopter  View 


Topic  1 

Exam  Focus 

This  is  an  introductory  topic  that  provides  coverage  of  fundamental  risk  management 
concepts  that  will  be  discussed  in  much  more  detail  throughout  the  FRM  curriculum. 

For  the  exam,  it  is  important  to  understand  the  general  risk  management  process  and  its 
potential  shortcomings,  the  concept  of  unexpected  loss,  and  some  of  the  underlying  points 
regarding  the  relationship  between  risk  and  reward.  Also,  the  material  on  the  main  categories 
of  financial  and  non-financial  risks  contains  several  testable  concepts. 


The  Concept  of  Risk 


LO  1.1:  Explain  the  concept  of  risk  and  compare  risk  management  to  risk  taking. 


Risk  arises  from  the  uncertainty  regarding  an  entity’s  future  losses  as  well  as  future  gains. 
Therefore,  in  simplified  terms,  there  is  a natural  trade-off  between  risk  and  return.  Risk 
is  not  necessarily  related  to  the  size  of  the  potential  loss.  For  example,  many  potential 
losses  are  large  but  are  quite  predictable  and  can  be  provided  for  using  risk  management 
techniques.  The  more  important  concern  is  the  variability  of  the  loss,  especially  a loss 
that  could  rise  to  unexpectedly  high  levels  or  a loss  that  suddenly  occurs  that  was  not 
anticipated. 

As  a starting  point,  risk  management  includes  the  sequence  of  activities  aimed  to  reduce 
or  eliminate  an  entity’s  potential  to  incur  expected  losses.  On  top  of  that,  there  is  the 
need  to  manage  the  unexpected  variability  of  some  costs.  In  managing  both  expected  and 
unexpected  losses,  risk  management  can  be  thought  of  as  a defensive  technique.  However, 
risk  management  is  actually  broader  in  the  sense  that  it  considers  how  an  entity  can 
consciously  determine  how  much  risk  it  is  willing  to  take  to  earn  future  uncertain  returns, 
which  involves  risk  taking. 

Risk  taking  refers  specifically  to  the  active  assumption  of  incremental  risk  in  order  to 
generate  incremental  gains.  In  that  regard,  risk  taking  can  be  thought  of  in  an  opportunistic 
context. 
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Topic  1 

Cross  Reference  to  GARP  Assigned  Reading  - Crouhy,  Galai,  and  Mark,  Chapter  1 


The  Risk  Management  Process 


LO  1.2:  Describe  the  risk  management  process  and  identify  problems  and 
challenges  which  can  arise  in  the  risk  management  process. 


The  risk  management  process  involves  the  following  five  steps: 

Step  1:  Identify  the  risks. 

Step  2:  Quantify  and  estimate  the  risk  exposures  or  determine  appropriate  methods  to 
transfer  the  risks. 

Step  3:  Determine  the  collective  effects  of  the  risk  exposures  or  perform  a cost-benefit 
analysis  on  risk  transfer  methods. 

Step  4:  Develop  a risk  mitigation  strategy  (i.e.,  avoid,  transfer,  mitigate,  or  assume  risk). 
Step  5:  Assess  performance  and  amend  risk  mitigation  strategy  as  needed. 

In  practice,  this  process  is  not  likely  to  operate  perfectly  in  the  above  sequence.  Two  key 
problems  with  the  process  include  identifying  the  correct  risk(s)  and  finding  an  efficient 
method  of  transferring  the  risk. 

One  of  the  challenges  in  ensuring  that  risk  management  will  be  beneficial  to  the  economy  is 
that  risk  must  be  sufficiently  dispersed  among  willing  and  able  participants  in  the  economy. 
Unfortunately,  a notable  failure  of  risk  management  occurred  during  the  financial  crisis 
between  2007  and  2009  when  it  was  subsequently  discovered  that  risk  was  too  concentrated 
among  too  few  participants. 

Another  challenge  of  the  risk  management  process  is  that  it  has  failed  to  consistently  assist 
in  preventing  market  disruptions  or  preventing  financial  accounting  fraud  (due  to  corporate 
governance  failures).  For  example,  the  existence  of  derivative  financial  instruments  greatly 
facilitates  the  ability  to  assume  high  levels  of  risk  and  the  tendency  of  risk  managers  to 
follow  each  others  actions  (e.g.,  selling  risky  assets  during  a market  crisis,  which  disrupts 
the  market  by  increasing  its  volatility). 

In  addition,  the  use  of  derivatives  as  complex  trading  strategies  assisted  in  overstating  the 
financial  position  (i.e.,  net  assets  on  balance  sheet)  of  many  entities  and  understating  the 
level  of  risk  assumed  by  many  entities.  Even  with  the  best  risk  management  policies  in 
place,  using  such  inaccurate  information  would  not  allow  the  policies  to  be  effective. 

Finally,  risk  management  may  not  be  effective  on  an  overall  economic  basis  because  it  only 
involves  risk  transferring  by  one  party  and  risk  assumption  by  another  party.  It  does  not 
result  in  overall  risk  elimination.  In  other  words,  risk  management  can  be  thought  of  as 
a zero-sum  game  in  that  some  “winning”  parties  will  gain  at  the  expense  of  some  “losing” 
parties.  However,  if  enough  parties  suffer  devastating  losses  due  to  an  excessive  assumption 
of  risk,  it  could  lead  to  a widespread  economic  crisis. 
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Measuring  and  Managing  Risk 


Topic  1 

Cross  Reference  to  GARP  Assigned  Reading  - Crouhy,  Galai,  and  Mark,  Chapter  1 


LO  1.3:  Evaluate  and  apply  tools  and  procedures  used  to  measure  and  manage 
risk,  including  quantitative  measures,  qualitative  assessment,  and  enterprise  risk 
management. 


Quantitative  Measures 

Value  at  risk  (VaR)  states  a certain  loss  amount  and  its  probability  of  occurring.  For 
example,  a financial  institution  may  have  a one-day  VaR  of  $2.5  million  at  the  95% 
confidence  level.  That  would  be  interpreted  as  having  a 5%  chance  that  there  will  be  a loss 
greater  than  $2.5  million  on  any  given  day.  VaR  is  a useful  measure  for  liquid  positions 
operating  under  normal  market  circumstances  over  a short  period  of  time.  It  is  less  useful 
and  potentially  dangerous  when  attempting  to  measure  risk  in  non-normal  circumstances, 
in  illiquid  positions,  and  over  a long  period  of  time. 

To  further  illustrate  the  concept  of  VaR,  assume  you  have  gathered  1,000  monthly  returns 
for  a security  and  produced  the  histogram  shown  in  Figure  1.  You  decide  that  you  want 
to  compute  the  monthly  VaR  for  this  security  at  a confidence  level  of  95%.  At  a 95% 
confidence  level,  the  lower  tail  displays  the  lowest  5%  of  the  underlying  distribution’s 
returns.  For  this  distribution,  the  value  associated  with  a 95%  confidence  level  is  a return  of 
-15.5%.  If  you  have  $1,000,000  invested  in  this  security,  the  one-month  VaR  is  $155,000 

(-15.5%  x $1,000,000). 

Figure  1 : Histogram  of  Monthly  Returns 


Monthly  Return 
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Cross  Reference  to  GARP  Assigned  Reading  - Crouhy,  Galai,  and  Mark,  Chapter  1 


Professor's  Note:  This  calculation  is  an  example  of  historical  VaR.  In  Book  4 , 
we  will  discuss  the  main  types  of  value  at  risk:  delta-normal  VaR,  historical 
VaR,  and  Monte  Carlo  simulation  VaR. 


Economic  capita]  refers  to  holding  sufficient  liquid  reserves  to  cover  a potential  loss.  For 
example,  if  one-day  VaR  is  $2.5  million  and  the  entity  holds  $2.5  million  in  liquid  reserves, 
then  it  is  unlikely  to  go  bankrupt  that  day. 


Qualitative  Assessment 

Scenario  analysis  takes  into  account  potential  risk  factors  with  uncertainties  that  are  often 
non-quantifiable.  One  option  is  to  consider  an  adverse  scenario  or  worst-case  scenario 
analysis  to  get  an  idea  of  the  full  magnitude  of  potential  losses  even  if  they  have  a very  small 
chance  of  occurring.  Worst-case  scenario  analysis  involves  examining  the  effects  of  possible 
macroeconomic  scenarios  on  the  entity  and  within  its  various  divisions,  often  taking  into 
account  several  categories  of  risk. 

Stress  testing  is  a form  of  scenario  analysis  that  examines  a financial  outcome  based  on  a 
given  “stress”  on  the  entity.  For  example,  it  is  plausible  for  interest  rates  or  unemployment 
rates  to  rise  severely  in  an  economic  crisis  and  stress  testing  attempts  to  examine  such  crisis 
situations  to  determine  the  outcome  on  the  entity. 


Enterprise  Risk  Management  (ERM) 

ERM  takes  an  integrative  approach  to  risk  management  within  an  entire  entity,  dispensing 
of  the  traditional  approach  of  independently  managing  risk  within  each  department 
or  division  of  an  entity.  ERM  considers  entity-wide  risks  and  tries  to  integrate  risk 
considerations  into  key  business  decisions.  Similar  to  traditional  approaches,  ERM  makes 
use  of  measures  such  as  economic  capital  and  stress  testing.  Senior  risk  committees  may 
exist  within  the  entity  to  ensure  that  risks  affecting  the  entire  entity  are  examined.  Within 
the  ERM  framework,  the  entity  and  its  board  of  directors  agree  on  specific  risk  exposure 
limits. 


Expected  and  Unexpected  Loss 


LO  1.4:  Distinguish  between  expected  loss  and  unexpected  loss,  and  provide 
examples  of  each. 


Expected  loss  considers  how  much  an  entity  expects  to  lose  in  the  normal  course  of 
business.  It  can  often  be  computed  in  advance  (and  provided  for)  with  relative  ease  because 
of  the  certainty  involved. 

For  example,  a retail  business  that  provides  credit  terms  on  sales  of  goods  to  its  customers 
(i.e.,  no  need  to  pay  immediately)  incurs  the  risk  of  non-payment  by  some  of  those 
customers.  If  the  business  has  been  in  operation  for  at  least  a few  years,  it  could  use  its 
operating  history  to  reasonably  estimate  the  percentage  of  annual  credit  sales  that  will  never 
be  collected.  The  amount  of  the  loss  is  therefore  predictable  and  is  treated  as  a regular  cost 
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of  doing  business  (i.e.,  bad  debt  expense  on  the  income  statement).  It  can  be  priced  into  the 
cost  of  the  goods  directly  in  the  case  of  the  retail  business.  In  contrast,  in  lines  of  business 
in  the  financial  sector,  the  cost  could  be  recovered  by  charging  commissions  on  various 
financial  transactions  or  by  implementing  spreads  between  a financial  institutions  lending 
rate  to  borrowers  and  its  cost  of  obtaining  those  funds. 

Unexpected  loss  considers  how  much  an  entity  could  lose  outside  of  the  normal  course  of 
business.  Compared  to  expected  loss,  it  is  generally  more  difficult  to  predict,  compute,  and 
provide  for  in  advance  because  of  the  uncertainty  involved. 

For  example,  consider  a commercial  loan  portfolio  that  is  focused  on  loans  to  automotive 
manufacturing  companies.  During  an  economic  expansion  that  favors  such  companies 
(because  individuals  have  more  disposable  income  to  spend  on  items  such  as  automobiles), 
the  lender  will  realize  very  few,  if  any,  loan  defaults.  However,  during  an  economic 
recession,  there  is  less  disposable  income  to  spend  and  many  more  loan  defaults  are  likely  to 
occur  from  borrowers,  likely  at  the  same  time.  This  is  an  example  of  correlation  risk , when 
unfavorable  events  happen  together.  The  correlation  risk  drives  up  the  potential  losses  to 
unexpected  levels. 

Another  example  of  correlation  risk  lies  with  real  estate  loans  secured  by  real  property. 

Borrowers  tend  to  default  on  such  loans  (i.e.,  default  rate  risk)  at  the  same  time  that  the 
real  property  values  fall  (i.e.,  recovery  rate  risk — the  creditor’s  collateral  is  worth  less, 
thereby  compromising  the  recovery  rate  on  the  funds  lent  to  the  borrowers).  These  two  risks 
occurring  simultaneously  could  drive  up  the  potential  losses  to  unexpected  levels. 

Realizing  the  existence  of  correlation  risks  helps  a risk  manager  measure  and  manage 
unexpected  losses  with  somewhat  more  certainty.  For  example,  historical  analysis  of  the 
extent  of  such  losses  in  the  past  due  to  correlation  risk  could  be  performed,  taking  into 
account  which  risk  factors  were  involved. 


Risk  and  Reward 


LO  1.5:  Interpret  the  relationship  between  risk  and  reward. 


As  previously  mentioned,  there  is  a trade-off  between  risk  and  reward.  In  very  general  and 
simplified  terms,  the  greater  the  risk  taken,  the  greater  the  potential  reward.  However,  one 
must  consider  the  variability  of  the  potential  reward.  The  portion  of  the  variability  that  is 
measurable  as  a probability  function  could  be  thought  of  as  risk  whereas  the  portion  that  is 
not  measurable  could  be  thought  of  as  uncertainty. 

The  relationship  between  risk  and  return  appears  easier  to  examine  with  publicly  traded 
securities.  For  example,  consider  fixed-income  securities.  Government  bonds  have  less 
credit  risk  than  corporate  bonds  in  general,  so  the  pricing  takes  into  account  that  the  yield 
spreads  for  government  bonds  are  narrower  than  corporate  bonds  across  various  maturities. 
However,  for  a given  maturity,  the  full  relationship  between  risk  and  return  goes  further 
than  merely  credit  risk  (e.g.,  liquidity  risks  and  taxation  impacts  may  make  the  relationship 
less  clear).  Additionally,  the  risk  tolerances  (i.e.,  ability  and  willingness  to  take  on  certain 
risks)  of  market  participants  may  change  over  time.  When  risk  tolerances  are  high,  the 
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spread  between  riskless  and  risky  bonds  may  narrow  to  an  abnormally  low  level,  which 
again  disguises  the  true  relationship  between  risk  and  return. 

Examining  the  relationship  between  risk  and  return  is  made  even  more  challenging  when 
dealing  with  non-publicly  traded  securities  because  the  pricing  of  such  securities  is  less 
reliable  compared  to  publicly  traded  securities  (i.e.,  no  market  price  validation). 

In  practice,  some  entities  have  weak  risk  management  and/or  risk  governance  cultures, 
which  allows  for  potential  returns  to  be  overstated  because  they  are  not  adjusted  for  risk. 
Correlation  risks  may  be  ignored,  which  understate  overall  risk.  Some  risk  measures  may 
be  computed  in  a misleading  manner  because  the  proper  computation  may  result  in  lower 
reported  profits  for  the  entity.  For  example,  for  entities  that  have  management  bonuses 
based  on  reported  profits,  the  use  of  mark  to  market  accounting  may  result  in  inflated 
profits  on  the  income  statement  (and  overstated  values  for  risky  assets  on  the  balance  sheet) 
during  a strong  year  in  order  to  maximize  the  management  bonuses  paid.  However,  at  the 
same  time,  there  are  usually  no  adjustments  made  to  risk  that  considers  the  fact  that  those 
profits  have  not  truly  been  earned  because  no  cash  has  been  received  yet  and,  in  fact,  may 
never  materialize  if  the  investments  subsequently  lose  significant  value. 


Risk  Classes 


LO  1.6:  Describe  and  differentiate  between  the  key  classes  of  risks,  explain  how 
each  type  of  risk  can  arise,  and  assess  the  potential  impact  of  each  type  of  risk  on 
an  organization. 


Market  Risk 

Market  risk  considers  how  changes  in  market  prices  and  rates  will  result  in  investment 
losses.  There  are  four  subtypes  of  market  risk:  (1)  interest  rate  risk,  (2)  equity  price  risk,  (3) 
foreign  exchange  risk,  and  (4)  commodity  price  risk. 

Interest  rate  risk  can  be  illustrated  in  simple  terms  by  considering  a bond  earning  a fixed 
rate  of  interest.  If  market  interest  rates  rise,  the  value  of  the  bond  will  decrease.  Another 
form  of  interest  rate  risk  is  the  hedging  of  bonds  against  a change  in  the  shape  of  the 
yield  curve  (although  it  may  be  properly  hedged  against  a parallel  shift  in  the  yield  curve). 
Furthermore,  interest  rate  risk  may  also  arise  from  having  completely  unhedged  positions 
or  having  only  partially  hedged  positions  due  to  underlying  transactions  that  did  not  fully 
offset  (even  though  they  were  meant  to  offset).  In  the  latter  case,  the  loss  could  be  attributed 
to  basis  risk , which  means  that  the  presumed  correlation  between  the  price  of  a bond  and 
the  price  of  the  hedging  vehicle  used  to  hedge  that  bond  has  changed  unfavorably. 

Equity  price  risk  refers  to  the  volatility  of  stock  prices.  It  can  be  broken  up  into  two  parts: 
(1)  general  market  risk , which  is  the  sensitivity  of  the  price  of  a stock  to  changes  in  broad 
market  indices,  and  (2)  specific  risk , which  is  the  sensitivity  of  the  price  of  a stock  due  to 
unique  factors  of  the  entity  (e.g.,  line  of  business,  strategic  weaknesses).  For  the  investor, 
general  market  risk  cannot  be  diversified  away  while  specific  risk  can  be  diversified  away. 
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Foreign  exchange  risk  refers  to  monetary  losses  that  arise  because  of  unhedged  or  not  fully 
hedged  foreign  currency  positions.  Foreign  exchange  risk  results  from  imperfect  correlations 
in  currency  price  movements  as  well  as  changes  in  international  interest  rates.  Potential 
large  losses  could  reduce  the  extent  of  an  entity’s  foreign  investment  and  also  put  it  at  a 
competitive  disadvantage  compared  to  its  foreign  competitors. 

Commodity  price  risk  refers  to  the  price  volatility  of  commodities  (e.g.,  precious  metals, 
base  metals,  agricultural  products,  energy)  due  to  the  concentration  of  specific  commodities 
in  the  hands  of  relatively  few  market  participants.  The  resulting  lack  of  trading  liquidity 
tends  to  increase  the  amount  of  price  volatility  compared  to  financial  securities.  In  addition, 
commodities  may  face  significant  price  discontinuities  (i.e.,  prices  suddenly  jump  from  one 
level  to  another). 

Credit  Risk 

Credit  risk  refers  to  a loss  suffered  by  a party  whereby  the  counterparty  fails  to  meet  its 
financial  obligations  to  the  party  under  the  contract.  Credit  risk  may  also  arise  if  there  is 
an  increasing  risk  of  default  by  the  counterparty  throughout  the  duration  of  the  contract. 

There  are  four  subtypes  of  credit  risk:  (1)  default  risk,  (2)  bankruptcy  risk,  (3)  downgrade 
risk,  and  (4)  settlement  risk. 

Default  risk  refers  to  the  non-payment  of  interest  and/or  principal  on  a loan  by  the 
borrower  to  the  lender.  The  period  of  default  past  the  due  date  could  be  at  least  30  or  60 
days. 

Bankruptcy  risk  involves  taking  possession  of  any  collateral  provided  by  the  defaulting 
counterparty.  The  risk  is  that  the  liquidation  value  of  the  collateral  is  insufficient  to  recover 
the  full  loss  on  default. 

Downgrade  risk  considers  the  decreased  creditworthiness  (based  on  recent  financial 
performance)  of  a counterparty  to  a transaction.  A creditor  may  subsequently  charge  the 
downgraded  entity  a higher  lending  rate  to  compensate  for  the  increased  risk.  For  a creditor, 
downgrade  risk  may  eventually  lead  to  default  risk. 

Settlement  risk  could  be  illustrated  using  a derivatives  transaction  between  two 
counterparties.  At  the  settlement  date,  one  of  them  is  in  a net  gain  (“winning”)  position  and 
the  other  is  in  a net  loss  (“losing”)  position.  The  position  that  is  losing  may  simply  refuse  to 
pay  and  fulfill  its  obligations. 

Continuing  with  the  concept  of  a net  gain  position  in  a transaction,  credit  risk  exists  only  to 
that  party.  If  the  losing  party  defaults,  then  the  winning  party  may  lose  some  or  all  of  that 
net  gain.  The  portion  that  is  expected  to  be  recovered  is  called  the  recovery  value  and  the 
portion  that  is  expected  to  be  lost  is  the  loss  given  default  (LGD).  For  example,  if  a party’s 
net  gain  position  is  $500,000  at  settlement  and  only  $400,000  is  expected  to  be  recovered, 
then  the  recovery  value  is  $400,000  and  the  LGD  is  $100,000.  Expressed  as  percentages, 
the  recovery  rate  is  80%  and  the  LGD  is  20%. 

It  is  also  necessary  to  consider  credit  risk  within  a portfolio  of  loans.  The  basic  issue  is  to 
ensure  that  the  lender  charges  a rate  of  interest  to  the  borrower  that  is  commensurate  with 
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the  risk  taken.  In  addition,  in  order  to  avoid  concentration  risk,  the  lender  should  ensure 
sufficient  diversification  of  loans  across  geographical  areas  and  industries.  Somewhat  related 
to  concentration  risk  are  correlation  risk  and  overall  economic  health.  Economic  recessions 
will  result  in  more  loan  defaults  and  there  is  tendency  for  loans  in  similar  geographical 
areas  or  industries  to  default  at  the  same  time.  Finally,  loan  portfolios  should  consider 
the  maturities  of  the  loans  and  avoid  concentration  on  specific  maturities,  giving  rise  to 
portfolio  maturity  risk.  A more  diversified  portfolio  with  loans  across  a reasonable  range 
of  maturities  will  also  help  avoid  liquidity  risk  by  having  more  frequent  cash  inflows  (i.e., 
loan  principal  repayments)  over  time  rather  than  having  most  of  the  cash  inflows  at  only 
specified  times. 

Liquidity  Risk 

Liquidity  risk  is  subdivided  into  two  parts:  (1)  funding  liquidity  risk  and  (2)  trading 
liquidity  risk. 

Funding  liquidity  risk  occurs  when  an  entity  is  unable  to  pay  down  or  refinance  its  debt, 
satisfy  any  cash  obligations  to  counterparties,  or  fund  any  capital  withdrawals.  Trading 
liquidity  risk  occurs  when  an  entity  is  unable  to  buy  or  sell  a security  at  the  market  price 
due  to  a temporary  inability  to  find  a counterparty  to  transact  on  the  other  side  of  the  trade. 
For  a transaction  that  must  be  executed  immediately  or  in  the  near  future,  it  might  have 
to  be  done  at  a very  significant  discount,  thereby  leading  to  a huge  loss.  The  loss  effect  is 
magnified  for  larger  transactions. 

The  impact  of  trading  liquidity  risk  on  an  entity  could  include  impairments  in  its  abilities 
to  control  market  risk  and  to  cover  any  funding  shortfalls. 

Operational  Risk 

Operational  risk  considers  a wide  range  of  “non-financial”  problems  such  as  inadequate 
computer  systems  (technology  risk),  insufficient  internal  controls,  incompetent 
management,  fraud  (e.g.,  losses  due  to  intentional  falsification  of  information),  human  error 
(e.g.,  losses  due  to  incorrect  data  entry  or  accidental  deletion  of  a file),  and  natural  disasters. 

Within  a financial  institution,  the  leveraged  nature  of  derivatives  transactions  makes  them 
susceptible  to  operational  risk.  Additionally,  the  difficulty  in  accurately  valuing  complicated 
derivatives  transactions  adds  to  operational  risk. 

A very  robust  system  of  internal  controls  is  required  within  an  entity  or  else  there  is  a risk  of 
significant  losses  due  to  various  operational  risks. 

Legal  and  Regulatory  Risk 

In  practice,  legal  and  regulatory  risk  is  highly  integrated  with  operational  and  reputation 
risk.  Within  a two-way  financial  transaction,  an  example  of  legal  risk  would  be  one 
party  suing  the  other  party  in  an  attempt  to  nullify  or  terminate  the  transaction.  From 
an  investing  perspective,  an  example  of  regulatory  risk  could  be  a change  in  tax  law  that 
increases  the  tax  rate  of  certain  types  of  income,  thereby  lowering  the  after-tax  investment 
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returns  for  many  investors,  or  changes  in  regulations  that  involve  further  areas  of 
compliance,  thereby  increasing  compliance  costs  for  an  entity. 

Business  Risk 

For  the  purposes  of  this  topic,  we  will  consider  business  risk  from  a financial  perspective. 

In  this  regard,  business  risk  revolves  around  uncertainty  regarding  the  entity’s  income 
statement,  although,  in  practice,  there  is  a substantial  amount  of  integration  with  strategic 
and  reputation  risk.  From  an  income  statement  perspective,  revenues  may  be  uncertain 
because  of  the  uncertainty  surrounding  the  demand  for  products  and/or  the  price  that 
should  be  set.  Production  and  administration  costs  may  also  be  uncertain. 

Business  risk  may  arise  because  the  actual  product  demand  is  significantly  lower  than 
anticipated  or  the  marketplace’s  toleration  of  a selling  price  is  much  lower  than  expected. 

In  addition,  there  may  be  production  cost  overruns  or  unexpected  costs  that  substantially 
increase  total  expenses.  Either  way,  the  decreased  revenues  and/or  the  increased  costs  may  be 
significant  enough  that  the  entity  suffers  financial  losses. 

From  a non-financial  (i.e.,  operational)  perspective,  a manufacturing  company  may 
experience  business  risk  due  to  testing,  production,  or  shipping  delays.  The  result  would  be 
lost  sales  and/or  substitution  to  competitors’  products  by  consumers. 

Strategic  Risk 

Strategic  risk  can  be  thought  of  in  the  context  of  large  new  business  investments,  which 
carry  a high  degree  of  uncertainty  as  to  ultimate  success  and  profitability.  For  example,  an 
entity  could  spend  millions  of  dollars  developing  a new  product  that  ultimately  fails  in  the 
marketplace  because  consumers  find  it  unsuitable  for  their  needs. 

Alternatively,  it  could  be  thought  of  from  the  perspective  of  an  entity  changing  its  business 
strategy  compared  to  its  competitors.  For  example,  a financial  institution  may  choose  to 
change  its  lending  focus  from  lending  to  stable  firms  and  attempt  to  lend  funds  to  risky 
firms  at  high  rates  of  interest  in  order  to  earn  higher  profits.  However,  an  economic  crisis 
ensues  and  many  of  those  risky  firms  default  on  their  loans,  leading  to  large  losses  to  the 
lending  financial  institution. 

The  impact  of  strategic  risk  will  be  felt  by  an  entity  if  its  business  decision  has  an 
unsuccessful  result,  thereby  incurring  large  losses  and  loss  of  reputation/confidence  by 
investors. 

Reputation  Risk 

Reputation  risk  consists  of  two  parts:  (1)  the  general  perceived  trustworthiness  of  an 
entity  (i.e.,  that  the  entity  is  able  and  willing  to  meet  its  obligations  to  its  creditors  and 
counterparties)  and  (2)  the  general  perception  that  the  entity  engages  in  fair  dealing  and 
conducts  business  in  an  ethical  manner. 
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Reputation  risk  could  arise  partly  due  to  the  existence  of  the  internet.  For  example,  social 
networking  sites  and  blogs  could  allow  for  rumors — true  or  false — to  be  spread  about  an 
entity  very  quickly.  An  entity’s  involvement  in  questionable  and  sophisticated  financial 
transactions  such  as  structured  finance  products  or  special  purpose  entities  may  give  rise 
to  reputation  risk  for  an  entity  because  the  interpretation  of  the  accounting  and  tax  rules 
related  to  such  transactions  may  be  misleading  and  border  on  illegal  in  some  cases. 

The  impact  of  reputation  risk  on  an  entity  could  start  with  lost  profits  and  eventually  lead 
to  insolvency  as  public  perception  of  the  entity  diminishes  together  with  the  value  of  the 
entity. 
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Key  Concepts 


LO  1.1 

Risk  arises  from  the  uncertainty  regarding  an  entity’s  future  losses  as  well  as  future  gains. 
Risk  management  includes  the  sequence  of  activities  aimed  to  reduce  or  eliminate  an  entity’s 
potential  to  incur  expected  losses.  Risk  taking  refers  specifically  to  the  active  assumption  of 
incremental  risk  in  order  to  generate  incremental  gains. 


LO  1.2 

In  its  basic  format,  the  risk  management  process  is  as  follows: 

Step  1:  Identify  the  risks. 

Step  2:  Quantify  and  estimate  the  risk  exposures  or  determine  appropriate  methods  to 
transfer  the  risks. 

Step  3:  Determine  the  collective  effects  of  the  risk  exposures  or  perform  a cost-benefit 
analysis  on  risk  transfer  methods. 

Step  4:  Develop  a risk  mitigation  strategy  (i.e.,  avoid,  transfer,  mitigate,  or  assume  risk). 
Step  5:  Assess  performance  and  amend  risk  mitigation  strategy  as  needed. 


LO  1.3 

Value  at  risk  (VaR)  states  a certain  loss  amount  and  its  probability  of  occurring. 

Economic  capital  refers  to  holding  sufficient  liquid  reserves  to  cover  a potential  loss. 

Scenario  analysis  takes  into  account  potential  risk  factors  with  uncertainties  that  are  often 
non-quantifiable. 

Stress  testing  is  a form  of  scenario  analysis  that  examines  a financial  outcome  based  on  a 
given  “stress”  on  the  entity. 

Enterprise  risk  management  takes  an  integrative  approach  to  risk  management  within  an 
entire  entity,  dispensing  of  the  traditional  approach  of  independently  managing  risk  within 
each  department  or  division  of  an  entity. 


LO  1.4 

Expected  loss  considers  how  much  an  entity  expects  to  lose  in  the  normal  course  of 
business.  It  can  often  be  computed  in  advance  (and  provided  for)  with  relative  ease  because 
of  the  certainty  involved. 

Unexpected  loss  considers  how  much  an  entity  could  lose  usually  outside  of  the  normal 
course  of  business.  Compared  to  expected  loss,  it  is  generally  more  difficult  to  predict, 
compute,  and  provide  for  in  advance  because  of  the  uncertainty  involved. 
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LO  1.5 

There  is  a trade-off  between  risk  and  reward.  In  very  general  and  simplified  terms,  the 
greater  the  risk  taken,  the  greater  the  potential  reward.  However,  one  must  consider  the 
variability  of  the  potential  reward.  The  portion  of  the  variability  that  is  measurable  as  a 
probability  function  could  be  thought  of  as  risk  whereas  the  portion  that  is  not  measurable 
could  be  thought  of  as  uncertainty. 


LO  1.6 

There  are  eight  key  classes  of  risk:  (1)  market  risk,  (2)  credit  risk,  (3)  liquidity  risk, 

(4)  operational  risk,  (5)  legal  and  regulatory  risk,  (6)  business  risk,  (7)  strategic  risk,  and 
(8)  reputation  risk. 

Market  risk  considers  how  changes  in  market  prices  and  rates  will  result  in  investment 
losses.  There  are  four  subtypes  of  market  risk:  (1)  interest  rate  risk,  (2)  equity  price  risk, 

(3)  foreign  exchange  risk,  and  (4)  commodity  price  risk. 

Credit  risk  refers  to  a loss  suffered  by  a party  whereby  the  counterparty  fails  to  meet  its 
financial  obligations  to  the  party  under  the  contract.  Credit  risk  may  also  arise  if  there  is 
an  increasing  risk  of  default  by  the  counterparty  throughout  the  duration  of  the  contract. 
There  are  four  subtypes  of  credit  risk:  (1)  default  risk,  (2)  bankruptcy  risk,  (3)  downgrade 
risk,  and  (4)  settlement  risk. 

Liquidity  risk  is  subdivided  into  two  parts:  (1)  funding  liquidity  risk  and  (2)  trading 
liquidity  risk.  Funding  liquidity  risk  occurs  when  an  entity  is  unable  to  pay  down  or 
refinance  its  debt,  satisfy  any  cash  obligations  to  counterparties,  or  fund  any  capital 
withdrawals.  Trading  liquidity  risk  occurs  when  an  entity  is  unable  to  buy  or  sell  a security 
at  the  market  price  due  to  a temporary  inability  to  find  a counterparty  to  transact  on  the 
other  side  of  the  trade. 

Operational  risk  considers  a wide  range  of  non-financial  problems  such  as  inadequate 
computer  systems,  insufficient  internal  controls,  incompetent  management,  fraud,  human 
error,  and  natural  disasters. 

Legal  risk  could  arise  when  one  party  sues  the  other  party  in  an  attempt  to  nullify  or 
terminate  the  transaction.  Regulatory  risk  could  arise  from  changes  in  laws  and  regulations 
that  are  unfavorable  to  the  entity  (e.g.,  higher  tax  rates,  higher  compliance  costs). 

Business  risk  revolves  around  uncertainty  regarding  the  entity’s  income  statement.  Revenues 
may  be  uncertain  because  of  the  uncertainty  surrounding  the  demand  for  the  products  and/ 
or  the  price  that  should  be  set.  Production  and  administration  costs  may  also  be  uncertain. 

Strategic  risk  can  be  thought  of  in  the  context  of  large  new  business  investments,  which 
carry  a high  degree  of  uncertainty  as  to  ultimate  success  and  profitability.  Alternatively, 
it  could  be  thought  of  from  the  perspective  of  an  entity  changing  its  business  strategy 
compared  to  its  competitors. 

Reputation  risk  consists  of  two  parts:  (1)  the  general  perceived  trustworthiness  of  an 
entity  (i.e.,  that  the  entity  is  able  and  willing  to  meet  its  obligations  to  its  creditors  and 
counterparties)  and  (2)  the  general  perception  that  the  entity  engages  in  fair  dealing  and 
conducts  business  in  an  ethical  manner. 
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Concept  Checkers 


1 . Which  of  the  following  statements  regarding  risk  and  risk  management  is  correct? 

A.  Risk  management  is  more  concerned  with  unexpected  losses  versus  expected 
losses. 

B.  There  is  a relationship  between  the  amount  of  risk  taken  and  the  size  of  the 
potential  loss. 

C.  The  final  step  of  the  risk  management  process  involves  developing  a risk 
mitigation  strategy. 

D.  If  executed  properly,  the  risk  management  process  may  allow  for  risk  elimination 
within  an  economy. 

2.  Examining  the  impact  of  a dramatic  increase  in  interest  rates  on  the  value  of  a bond 
investment  portfolio  could  be  performed  using  which  of  the  following  tools? 

I.  Stress  testing. 

II.  Enterprise  risk  management. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

3.  Which  of  the  following  items  would  be  associated  with  unexpected  losses? 

I.  Loan  defaults  are  increasing  simultaneously  while  recovery  rates  are  decreasing. 
II.  Lending  losses  are  covered  by  charging  a spread  between  the  cost  of  funds  and 
the  lending  rate. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

4.  In  considering  the  major  classes  of  risks,  which  risk  would  best  describe  an  entity 
with  weak  internal  controls  that  could  easily  be  circumvented  with  a lack  of 
segregation  of  duties? 

A.  Business  risk. 

B.  Legal  and  regulatory  risk. 

C.  Operational  risk. 

D.  Strategic  risk. 

3.  Local  Bank,  Inc.,  (LBI)  has  loaned  funds  to  a private  manufacturing  company, 

named  We  Make  It  All  (Make  It).  The  current  balance  of  the  loan  is  $1  million  and 
it  is  secured  by  a piece  of  land  and  the  corresponding  building  owned  by  Make  It. 
Due  to  an  economic  downturn,  Make  It  suffered  a loss  for  the  first  time  in  its  10- 
year  operating  history  and  is  currently  experiencing  some  cash  flow  difficulties.  In 
addition,  the  land  and  building  that  is  held  as  collateral  has  recently  been  appraised 
at  only  $800,000.  Based  only  on  the  information  provided,  which  of  the  following 
risks  faced  by  LBI  have  increased? 

A.  Bankruptcy  risk  and  default  risk. 

B.  Bankruptcy  risk  and  settlement  risk. 

C.  Default  risk  and  downgrade  risk. 

D.  Default  risk,  downgrade  risk,  and  settlement  risk. 
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Concept  Checker  Answers 


1 . A Risk  management  is  more  concerned  with  the  variability  of  losses,  especially  ones  that 

could  rise  to  unexpectedly  high  levels  or  ones  that  suddenly  occur  that  were  not  anticipated 
(unexpected  losses). 

Choice  B is  not  correct  because  risk  is  not  necessarily  related  to  the  size  of  the  potential  loss. 
For  example,  many  potential  losses  are  large  but  are  quite  predictable  and  can  be  provided 
for  using  risk  management  techniques.  Choice  C is  not  correct  because  the  final  step  of  the 
risk  management  process  involves  assessing  performance  and  amending  the  risk  mitigation 
strategy  as  needed.  Choice  D is  not  correct  because  the  risk  management  process  only 
involves  risk  transferring  by  one  party  and  risk  assumption  by  another  counterparty.  It  is  a 
zero-sum  game  so  it  does  not  result  in  overall  risk  elimination. 

2.  C Examining  the  impact  of  a dramatic  increase  in  interest  rates  is  an  example  of  stress  testing. 

Enterprise  risk  management  makes  use  of  measures  such  as  stress  testing. 

3.  A Loan  defaults  are  increasing  simultaneously  while  recovery  rates  are  decreasing  is  an  example 

of  correlation  risk.  Correlation  risk  could  drive  up  the  potential  losses  to  unexpected  levels. 

In  contrast,  if  lending  losses  are  covered  with  a spread,  given  that  there  is  sufficient 
information  to  compute  such  a spread,  then  the  losses  would  likely  be  considered  expected 
losses. 

4.  C Weak  internal  controls  and  lack  of  segregation  of  duties  would  represent  a non-financial  risk 

and  be  best  described  as  an  operational  risk. 

Choice  A is  not  correct  because  business  risk  focuses  on  the  income  statement  (i.e.,  revenues 
too  low  and  expenses  too  high).  Choice  B is  not  correct  because  legal  and  regulatory  risk 
focuses  on  the  risk  of  an  entity  being  sued  or  the  risk  of  unfavorable  changes  in  the  rules  and 
laws  that  the  entity  must  follow.  Choice  D is  not  correct  because  strategic  risk  focuses  on 
significant  new  business  investments  or  significant  changes  in  an  entity’s  business  strategy. 

5.  A The  fact  that  the  loan  is  secured  by  land  and  the  building  is  now  worth  less  than  the  amount 

of  the  loan  outstanding  subjects  LBI  to  increased  bankruptcy  risk  in  the  sense  that  the 
liquidation  value  of  the  collateral  is  insufficient  to  recover  the  loss  if  the  loan  defaults.  The 
financial  loss  and  the  cash  flow  difficulties  suggest  that  there  is  increased  default  risk  for  LBI 
as  well. 

Downgrade  risk  does  not  apply  here  because  Make  It’s  loan  is  not  publicly  traded  and  is 
unlikely  to  be  rated  by  a recognized  rating  agency.  Settlement  risk  does  not  apply  here  either 
because  there  is  no  exchange  of  cash  flows  at  the  end  of  the  transaction  that  would  be 
required  to  incur  such  risk.  In  this  case,  the  loan  is  settled  when  Make  It  fully  repays  the 
principal  balance  owed. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


Corporate  Risk  Management: 
A Primer 


Topic  2 

Exam  Focus 

This  topic  builds  on  the  material  from  the  previous  topic  and  provides  coverage  of  additional 
fundamental  concepts  such  as  the  capital  asset  pricing  model  (CAPM),  the  advantages  of 
hedging,  financial  versus  operating  risk,  and  commonly  encountered  types  of  risk  such  as 
pricing  risk,  foreign  exchange  risk,  and  interest  rate  risk.  For  the  exam,  pay  close  attention 
to  the  material  on  hedging  risk  exposures,  the  role  of  the  board  of  directors  in  determining 
whether  to  hedge  specific  risk  factors,  and  foreign  currency  risk. 


Hedging  Risk  Exposures 


LO  2.1:  Evaluate  some  advantages  and  disadvantages  of  hedging  risk  exposures. 


Disadvantages  (In  Theory) 

In  1958,  Franco  Modigliani  and  Merton  Miller  argued  that  under  the  assumption  of 
perfectly  competitive  capital  markets  with  no  transaction  costs  or  taxes,  both  the  firm  and 
the  individual  investor  are  able  to  perform  the  same  financial  transactions  at  the  same  cost. 
In  other  words,  the  value  of  the  firm  will  remain  constant  despite  any  attempt  to  hedge 
risk  exposures.  Unfortunately,  the  assumption  of  no  transaction  costs  or  taxes  is  highly 
unrealistic  in  the  real  world,  which  makes  it  a weak  argument  not  to  hedge  risk. 

In  1964,  William  Sharpe  developed  the  capital  asset  pricing  model  (CAPM),  which  argues 
that  under  perfect  capital  markets,  firms  should  only  be  concerned  with  systematic  risk  (or 
beta  risk;  risk  that  is  common  to  all  market  participants).  Firms  should  not  be  concerned 
with  unsystematic  risk  (or  idiosyncratic  risk)  that  pertains  specifically  to  the  firm  because 
such  risk  could  be  reduced  through  diversification  in  a large  investment  portfolio  and  in 
a costless  manner.  Unfortunately,  the  perfect  capital  markets  assumption  is  not  realistic  in 
practice,  and  diversification  activities  will  result  in  transaction  costs. 

There  is  the  belief  by  many  market  participants  that  hedging  is  a zero-sum  game  that  has 
no  long-term  increase  on  a firm’s  earnings  or  cash  flows  (because  earnings/cash  flows  are 
simply  moved  between  periods).  That  argument  assumes  perfect  capital  markets  and  that 
derivatives  pricing  fully  reflects  all  of  its  risk  factors.  Unfortunately,  in  practice,  derivatives 
pricing  is  extremely  complex  and  not  as  accurate  compared  to  equity  and  bond  pricing. 
Therefore,  derivatives  pricing  is  not  always  likely  to  reflect  all  of  its  risk  factors  so  hedging 
with  derivatives  may  not  always  be  a zero-sum  game  of  transferring  risk  between  periods  or 
between  participants. 
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A noteworthy  point  is  that  none  of  the  above  arguments  consider  the  existence  of  the 
significant  costs  of  financial  distress  and  bankruptcy,  a point  that  runs  contrary  to  the 
assumption  of  perfect  capital  markets. 

Disadvantages  (In  Practice) 

Hedging  activities  may  be  extensive  enough  that  they  cause  management  to  lose  focus  on 
the  core  business  activities  of  the  firm,  possibly  resulting  in  lost  profits.  Hedging  often 
requires  very  specific  skills,  knowledge,  research,  and  time,  which  may  not  be  available 
within  the  management  team.  In  addition,  attempting  to  hedge  using  a flawed  hedging 
strategy  may  result  in  losses  to  the  firm  that  are  greater  than  the  actual  risk(s). 

All  hedging  strategies  will  incur  compliance  costs,  such  as  ones  related  to  disclosure 
and  accounting.  Also,  the  use  of  derivatives  (e.g.,  futures  contracts)  to  hedge  may  reveal 
operational  information  that  a firm  may  otherwise  prefer  to  keep  private.  Such  costs  would 
reduce  the  firm’s  incentive  to  hedge  its  risks.  Finally,  hedging  to  decrease  the  variability 
of  the  firm's  value  may  end  up  increasing  the  variability  of  the  firm’s  earnings  due  to  the 
difference  between  accounting  earnings  and  cash  flows. 

Advantages  (In  Practice) 

One  of  the  key  reasons  for  a firm  to  hedge  its  risk  exposures  is  the  possibility  of  lowering 
its  cost  of  capital  (debt  or  equity),  which  could  lead  to  increased  economic  growth.  By 
reducing  the  volatility  of  its  earnings/cash  flows,  a firm  may  be  able  to  increase  its  debt 
capacity  in  order  to  borrow  funds  to  take  advantage  of  lucrative  investment  opportunities. 
Also,  borrowing  arrangements  for  firms  with  less  volatile  earnings/cash  flows  usually  contain 
fewer  conditions  and  restrictions  imposed  by  the  lenders. 

Similarly,  reduced  volatility  and  greater  stability  of  earnings/cash  flows  is  often  an  indication 
to  the  firm’s  stakeholders  that  management  is  doing  a good  job.  This  is  often  reflected 
directly  in  the  firm’s  stock  price  being  stable  or  rising. 

Hedging  may  allow  management  to  control  its  financial  performance  to  meet  the 
requirements  of  the  board  of  directors.  For  example,  management  is  implicitly  conveying 
the  level  of  risk  it  is  able  and  willing  to  accept  on  an  unhedged  basis  (i.e.,  its  risk  appetite) 
when  it  makes  choices  on  hedging  specific  risk  exposures.  The  risk  appetite  would  need  to 
be  approved  in  advance  by  the  board  so  hedging  may  assist  management  in  meeting  the 
board’s  requirements. 

Hedging  may  result  in  operational  improvements  within  a firm.  For  example,  for  a 
manufacturing  firm,  cost  and  price  stability  may  be  achieved  if  it  is  able  to  ascertain  a 
locked-in  price  for  its  inputs. 

Hedging  through  the  use  of  derivatives  instruments  such  as  swaps  and  options  may  be 
cheaper  than  purchasing  an  insurance  policy.  One  must  consider  whether  the  total  cost  of 
the  insurance  over  the  years  exceeds  the  estimated  losses. 

Some  arguments  for  hedging  are  focused  on  taxation.  The  existence  of  progressive  tax 
rates  may  result  in  volatile  earnings  (with  no  hedging)  incurring  more  income  tax  liability 
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compared  to  stable  earnings  (with  hedging).  In  addition,  hedging  with  derivatives  (off- 
balance  sheet)  may  allow  for  more  debt  financing,  which  results  in  more  tax  deductions 
for  interest  costs  incurred.  In  practice,  neither  argument  seems  to  have  much  validity.  For 
example,  the  tax  liabilities  tend  to  even  out  between  the  volatile  and  non-volatile  years, 
especially  because  losses  in  one  year  may  be  offset  against  income  in  another  year. 


Hedging  Decisions 


LO  2.2:  Explain  how  a company  can  determine  whether  to  hedge  specific  risk 
factors,  including  the  role  of  the  board  of  directors  and  the  process  of  mapping 
risks. 


As  a start,  a firm  must  know  its  risk  and  return  goals  before  embarking  on  a risk 
management  plan.  Those  goals  must  be  evaluated  and  approved  by  the  board  of  directors  to 
ensure  the  plan  is  focused  and  relevant.  A major  conclusion  to  consider  with  the  risk/return 
trade-off  is  that  firms  should  accept  all  projects  with  a positive  net  present  value  (NPV), 
taking  into  account  risk,  because  it  will  maximize  value  for  the  firms  stakeholders. 

The  Role  of  the  Board  of  Directors 

Management  and  the  board  need  to  set  and  communicate  the  firms  risk  appetite  in  a 
quantitative  and/or  qualitative  manner.  There  are  several  possibilities,  including: 

• Explicitly  stating  (qualitatively)  which  risks  the  firm  can  tolerate  (to  be  left  unhedged) 
and,  therefore,  which  risks  it  cannot  tolerate  (to  be  hedged). 

• Using  a quantitative  metric  such  as  value  at  risk  (VaR)  to  convey  the  maximum  loss  the 
firm  will  tolerate  for  a given  confidence  level  for  a given  period  of  time. 

• Using  stress  testing  whereby  management  considers  possible  but  very  severely  negative 
scenarios  to  determine  the  level  of  losses.  From  there,  the  board  makes  the  determination 
of  which  losses  are  tolerable  (to  not  mitigate  or  to  leave  uninsured)  and  which  ones  are 
not  tolerable  (to  be  mitigated  or  insured). 

A problematic  issue  for  the  board  of  directors  in  determining  the  firms  risk  appetite 
centers  on  the  potential  conflict  between  the  two  major  stakeholders — debtholders  and 
shareholders.  Debtholders  would  likely  be  more  concerned  with  minimizing  all  risks 
because  their  upside  potential  is  generally  limited  to  the  rate  of  interest  charged.  In  contrast, 
shareholders  may  be  willing  for  the  firm  to  accept  a large  but  unlikely  risk  in  order  to 
increase  equity  returns. 

The  board  must  ensure  that  its  goals  are  stated  in  a clear  and  actionable  manner.  From  a 
performance  evaluation/measurement  perspective,  criteria  to  determine  the  relative  success 
in  meeting  those  goals  must  be  set  in  advance  to  ensure  objectivity  in  the  process. 

The  board  should  clarify  its  objectives  in  terms  of  whether  it  is  accounting  or  economic 
profits  that  are  to  be  hedged.  For  example,  a domestic  firm  may  have  an  overseas  subsidiary 
with  assets  that  are  financed  by  loans  (for  the  exact  same  dollar  value)  in  the  same  currency. 
This  represents  a hedging  of  economic  profits.  However,  if  that  subsidiary  is  not  considered 
self-sustaining  and  is  integrated  with  the  domestic  firm,  then  the  loan  is  maintained  in  the 
foreign  currency  but  the  assets  must  be  translated  to  the  domestic  currency,  thereby  creating 
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foreign  exchange  risk  for  the  accounting  profits.  So  if  the  foreign  currency  appreciates 
relative  to  the  domestic  currency,  upon  translation  to  the  domestic  currency,  there  will 
be  a translation  loss  for  accounting  purposes.  Of  course,  the  accounting  profits  could  be 
hedged  by  purchasing  a forward  contract  on  the  foreign  currency;  however,  that  will  create 
economic  risk.  The  bottom  line  is  that  it  is  not  possible  to  hedge  both  accounting  and 
economic  risk  at  the  same  time,  so  a choice  between  the  two  must  be  made. 

Additionally,  the  issue  of  hedging  short-term  versus  long-term  accounting  profits  (i.e., 
smoothing  the  fluctuations  over  the  years)  needs  to  be  considered.  Doing  so  may  entail 
significant  effort  and  cost  from  a cash  flow  perspective.  However,  one  argument  in  favor 
of  smoothing  is  that  for  publicly  traded  companies,  stable  reported  earnings  (rather  than 
fluctuating)  often  assist  with  maintaining  or  increasing  the  stock  price. 

The  board  must  be  definitive  in  the  time  horizon  when  determining  its  risk  management 
goals  for  management  to  achieve.  Liquidity,  accounting,  and  tax  effects  need  to  be 
considered.  For  example,  the  use  of  a futures  contract  to  hedge  future  sales  receipts  will 
result  in  a mismatch  of  profits  for  accounting  purposes  (e.g.,  sales  revenue  recognized  only 
upon  completion  of  transaction  while  the  futures  contract  requires  periodic  marking  to 
market),  or  if  the  futures  contract  is  in  a “gain”  position  at  the  end  of  the  year,  there  may  be 
taxes  payable  prior  to  the  receipt  of  any  sales  receipts  (liquidity  and  tax  effects). 

Finally,  the  board  may  wish  to  implement  definitive  and  quantitative  risk  limits  within 
which  management  is  allowed  to  transact  at  its  own  discretion.  Any  amounts  outside  of 
those  limits  would  not  be  permissible,  would  require  special  approval  from  the  board,  or 
would  require  hedging. 

The  Process  of  Mapping  Risks 

Mapping  risks  is  the  next  logical  step  once  management  and  the  board  have  determined 
which  risks  to  accept  and  which  ones  to  manage.  In  that  regard,  it  must  be  clear  which  risks 
are  insurable,  hedgeable,  noninsurable,  or  nonhedgeable  in  order  to  determine  what  items 
could  be  used  to  reduce  the  firms  risk. 

Mapping  risks  could  be  performed  for  market  risk,  credit  risk,  business  risk,  and  operational 
risk.  Using  currency  risk  as  an  example  of  market  risk,  consider  the  impact  of  currency 
risk  on  a firms  current  positions  and  future  transactions.  Management  could  start  with  the 
balance  sheet  by  determining  the  values  of  all  assets  and  liabilities  that  could  be  impacted 
by  exchange-rate  fluctuations  and  break  them  out  into  the  different  currencies.  Then  it 
could  move  on  to  the  income  statement  and  request  internal  information  on  confirmed 
(and  possibly  unconfirmed)  future  sales  to  foreign  customers  in  the  various  currencies  for 
the  relevant  period.  The  same  would  be  done  for  expenses  to  be  incurred.  Once  all  the 
information  is  gathered,  the  timing  of  cash  inflows  and  outflows  for  each  currency  can  be 
analyzed  to  determine  the  next  steps  (i.e.,  how  much  to  hedge,  which  currencies  to  hedge). 

On  an  overall  basis,  the  firm  should  also  research  and  identify  the  top  10  risk  exposures  it 
faces.  For  each  of  those  risks,  a dollar  value  should  be  assigned  to  indicate  the  potential  loss 
as  well  as  a probability  to  indicate  the  likelihood  of  it  happening.  Similarly,  management 
should  be  aware  of  its  general  exposure  to  fluctuations  in  interest  rates,  foreign  exchange 
rates,  equity  prices,  and  commodity  prices. 


Page  18 


©2015  Kaplan,  Inc. 


Topic  2 

Cross  Reference  to  GARP  Assigned  Reading  - Crouhy  Galai,  and  Mark,  Chapter  2 


Hedging  Operational  and  Financial  Risks 


LO  2.3:  Apply  appropriate  methods  to  hedge  operational  and  financial  risks, 
including  pricing,  foreign  currency,  and  interest  rate  risk. 


Hedging  operational  risks  covers  a firm’s  activities  in  production  (costs)  and  sales  (revenue), 
which  is  essentially  the  income  statement.  Financial  position  risk  pertains  to  a firm’s  balance 
sheet.  Making  the  realistic  assumption  that  there  are  some  imperfections  in  the  financial 
markets,  a firm  could  benefit  from  hedging  financial  position  risk.  Hedging  activities  should 
cover  both  the  firm’s  assets  and  liabilities  in  order  to  fully  account  for  the  risks. 

Pricing  Risk 

With  production,  the  cost  of  inputs  may  have  a significant  impact  on  the  firm’s  ability 
to  conduct  its  business  in  a competitive  manner.  Therefore,  it  makes  sense  to  hedge  such 
pricing  risk  by  purchasing  a forward  or  futures  contract  to  buy  a specific  quantity  of  that 
input  at  a fixed  cost  determined  in  advance.  The  same  could  be  done  with  a firm’s  domestic 
or  foreign  sales,  as  will  be  discussed  next. 

Foreign  Currency  Risk 

The  goal  of  hedging  foreign  currency  risk  is  to  control  exposure  to  exchange  rate 
fluctuations  that  impact  future  cash  flows  and  the  fair  value  of  assets  and  liabilities. 

Revenue  hedging  can  be  used  when  a firm  has  sales  to  customers  in  foreign  countries 
(with  payment  in  the  foreign  currency).  There  is  the  risk  of  the  devaluation  of  the  foreign 
currency  in  the  future,  resulting  in  losses  to  the  firm  when  the  funds  are  ultimately 
converted  back  to  the  domestic  currency.  The  firm  could  hedge  some  of  its  expected  foreign 
currency  receipts  in  the  future,  taking  into  account  the  cost  of  hedging  as  well  as  revenue 
and  exchange-rate  volatilities  and  correlations.  Instruments  that  could  be  used  include 
currency  put  options  (to  ensure  a known  absolute  minimum  return  should  the  exchange 
rate  fall  beyond  the  strike  rate)  and  forward  contracts  (to  ensure  a known  return  based  on 
an  exchange  rate  determined  in  advance  and  acceptable  by  the  firm). 

In  hedging  the  firm’s  balance  sheet  exposures,  the  focus  is  on  the  impact  of  foreign  exchange 
rate  fluctuations  on  the  net  monetary  assets  of  its  foreign  investments.  Forward  contracts 
are  often  used  in  this  regard  because  they  allow  for  the  payment  (“loss”)  or  receipt  (“gain”) 
by  the  firm  of  a fixed  amount  at  a fixed  exchange  rate  that  would  offset  any  impact  of 
rate  changes  on  the  net  monetary  assets  (gain  or  loss;  opposite  of  the  forward  contract). 
Foreign  currency  debt  (liability)  could  also  serve  as  a natural  offset  against  a decrease  in  the 
value  of  a firm’s  foreign  investment  (asset).  Note  that  in  some  instances  hedging  costs  are 
prohibitively  expensive  from  a cost-benefit  perspective  and  therefore  some  foreign  currency 
positions  may  be  left  deliberately  unhedged. 


©2015  Kaplan,  Inc. 


Page  19 


Topic  2 

Cross  Reference  to  GARP  Assigned  Reading  - Crouhy,  Galai,  and  Mark,  Chapter  2 

Interest  Rate  Risk 

The  goal  of  hedging  interest  rate  risk  is  to  control  the  firms  net  exposure  (asset  or 
liability)  to  unfavorable  interest  rate  fluctuations.  From  both  an  investing  and  a borrowing 
perspective,  interest  rate  swaps  may  be  used  to  protect  a firm  against  losses.  Also,  it  may 
help  a firm  to  minimize  its  borrowing  costs.  Identical  to  the  point  above  about  high  hedging 
costs,  some  interest  rate  positions  may  be  left  deliberately  unhedged. 

Static  vs.  Dynamic  Hedging  Strategies 

A static  hedging  strategy  is  a simple  process  in  which  the  risky  investment  position  is  initially 
determined  and  an  appropriate  hedging  vehicle  is  used  to  match  that  position  as  close 
as  possible  and  for  as  long  as  required.  In  contrast,  a dynamic  hedging  strategy  is  a more 
complex  process  that  recognizes  that  the  attributes  of  the  underlying  risky  position  may 
change  with  time.  Assuming  it  is  desired  to  maintain  the  initial  risky  position,  there  will 
be  additional  transaction  costs  required  to  do  so.  Significantly  more  time  and  monitoring 
efforts  are  required  with  a dynamic  hedging  strategy. 

Additional  hedging  considerations  include  the  following: 

• The  firm  must  consider  relevant  time  horizons  for  hedging  and  ensure  that  performance 
evaluations  are  matched  with  the  time  horizons. 

• The  firm  needs  to  assess  the  (often)  complex  financial  accounting  implications  of 
hedging  with  derivatives.  For  example,  if  the  hedge  is  not  an  exact  match  or  offset  to  the 
underlying  position,  then  there  will  be  a gain/loss  to  report  on  the  income  statement. 

• The  taxation  of  derivatives  is  a key  issue  because  of  its  impact  on  the  firm’s  cash  flows 
as  well  as  the  differing  laws  between  countries.  Significant  effort  and  cost  (which 
increase  hedging  costs)  may  be  required  to  decipher  the  complex  tax  rules  surrounding 
derivatives. 

Risk  Management  Instruments 


LO  2.4:  Assess  the  impact  of  risk  management  instruments. 


Once  the  risks  are  mapped,  management  and  the  board  need  to  determine  which 
instruments  to  use  to  manage  the  risks.  As  stated  previously,  a simple  example  would  be  a 
foreign  subsidiary  with  assets  that  are  hedged  with  an  equal  dollar  amount  of  liabilities.  The 
same  can  be  done  for  a foreign  liability  with  a foreign  asset.  The  underlying  assumption  is 
that  the  time  horizon  is  appropriate. 

For  other  transactions,  decisions  need  to  be  made  whether  to  fully  insure,  partially  insure, 
or  not  to  insure  (i.e.,  self-insure)  with  insurance  products,  taking  into  account  the  benefits 
and  costs  of  doing  so. 

Financial  instruments  are  used  to  hedge  risks  and  can  be  classified  as  exchange  traded  or 
over  the  counter  (OTC).  Exchange-traded  instruments  cover  only  certain  underlying 
assets  and  are  quite  standardized  (e.g.,  maturities  and  strike  prices)  in  order  to  promote 
liquidity  in  the  marketplace.  OTC  instruments  are  privately  traded  between  a bank  and 
a firm  and  thus  can  be  customized  to  suit  the  firm’s  risk  management  needs.  In  exchange 
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for  the  customization,  OTC  instruments  are  less  liquid  and  more  difficult  to  price  than 
exchange-traded  instruments.  In  addition,  there  is  credit  risk  by  either  of  the  counterparties 
(e.g.,  default  risk)  that  would  generally  not  exist  with  exchange-traded  instruments. 
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Key  Concepts 


LO  2.1 

There  are  some  theoretical  reasons  for  a firm  not  to  hedge  risk  exposures  but  most  of  those 
reasons  make  the  unrealistic  assumption  of  perfect  capital  markets,  which  is  not  realistic. 
Also,  they  ignore  the  existence  of  the  significant  costs  of  financial  distress  and  bankruptcy. 
However,  in  practice,  there  are  some  valid  reasons  not  to  hedge,  including  the  distraction 
from  focusing  on  the  core  business,  lack  of  skills  and  knowledge,  and  transaction  and 
compliance  costs. 

Many  reasons  exist  for  a firm  to  hedge  its  risk  exposures.  Key  reasons  include  lowering  the 
cost  of  capital,  reducing  volatility  of  reported  earnings,  operational  improvements,  and 
potential  cost  savings  over  traditional  insurance  products. 


LO  2.2 

In  hedging  specific  risk  factors,  it  is  necessary  to  consider  the  role  of  the  board  of  directors 
as  well  as  the  process  of  mapping.  The  board,  together  with  management,  should  set  the 
firm’s  risk  appetite  using  one  or  more  of  the  following  tools:  qualitative  statements  of 
risk  tolerance,  value  at  risk,  and  stress  testing.  Risk  management  goals  must  be  clear  and 
actionable  and  there  should  be  clarification  whether  accounting  or  economic  profits  are 
to  be  hedged.  Likewise,  there  should  be  clarification  whether  short-term  or  long-term 
accounting  profits  are  to  be  hedged.  Other  points  the  board  should  consider  include  the 
time  horizon  and  the  possibility  of  implementing  definitive  and  quantitative  risk  limits. 

Mapping  risks  requires  clarification  as  to  which  risks  are  insurable,  hedgeable,  noninsurable, 
or  nonhedgeable.  Mapping  risks  could  be  performed  for  various  risks  such  as  market,  credit, 
business,  and  operational.  Essentially,  it  involves  a detailed  analysis  of  the  impacts  of  such 
risks  on  the  firm’s  financial  position  (balance  sheet)  and  financial  performance  (income 
statement). 


LO  2.3 

Hedging  operational  risks  tend  to  cover  a firm’s  income  statement  activities  while  hedging 
financial  risks  tend  to  cover  the  balance  sheet.  Pricing  risk  could  be  thought  of  as  a type  of 
operational  risk,  requiring  the  hedging  of  revenues  and  costs.  Foreign  currency  risk  refers 
to  the  risk  of  economic  loss  due  to  unfavorable  changes  in  the  foreign  currency  exchange 
rate;  to  the  extent  that  there  is  production  and  sales  activity  in  the  foreign  currency,  pricing 
risk  would  exist  simultaneously.  Interest  rate  risk  refers  to  the  risk  inherent  in  a firm’s  net 
exposure  to  unfavorable  interest  rate  fluctuations. 

Hedging  strategies  could  be  categorized  as  either  static  or  dynamic,  with  dynamic 
strategies  being  more  complex  and  requiring  additional  monitoring  and  transaction  costs. 
Additionally,  factors  such  as  time  horizon,  accounting,  and  taxation  need  to  be  considered 
within  any  hedging  strategy. 
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LO  2.4 

Once  the  risks  are  mapped,  management  and  the  board  need  to  determine  which 
instruments  to  use  to  manage  the  risks.  The  relevant  instruments  can  be  classified  as 
exchange  traded  or  over  the  counter  (OTC).  Exchange-traded  instruments  are  generally 
quite  standardized  and  liquid.  OTC  instruments  are  more  customized  to  the  firm’s 
needs  and  therefore  less  liquid.  An  element  of  credit  risk  is  also  introduced  with  OTC 
instruments. 
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Concept  Checkers 


1.  Melody  Li  is  a junior  risk  analyst  who  has  recently  prepared  a report  on  the 
advantages  and  disadvantages  of  hedging  risk  exposures.  An  excerpt  from  her  report 
contains  four  statements.  Which  of  Li’s  statements  is  correct? 

A.  Purchasing  an  insurance  policy  is  an  example  of  hedging. 

B.  In  practice,  hedging  with  derivatives  is  not  likely  to  be  a zero-sum  game. 

C.  The  existence  of  significant  costs  of  financial  distress  and  bankruptcy  is 
considered  within  the  assumption  of  perfect  capital  markets. 

D.  Hedging  with  derivatives  is  advantageous  in  the  sense  that  there  is  often  the 
ability  to  avoid  numerous  disclosure  requirements  compared  with  other  financial 
instruments. 

2.  The  involvement  of  the  board  of  directors  is  important  within  the  context  of  a firm’s 
decision  to  hedge  specific  risk  factors.  Which  of  the  following  statements  regarding 
the  setting  of  risk  appetite  is  correct? 

I.  Risk  appetite  may  be  conveyed  strictly  in  a qualitative  manner. 

II.  Debtholders  and  shareholders  are  both  likely  to  desire  minimizing  the  firm’s 
risk  appetite. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

3.  Which  of  the  following  statements  regarding  the  hedging  of  risk  exposures  is  correct? 

A.  The  use  of  a futures  contract  to  hedge  future  sales  receipts  may  result  in 
premature  taxes  payable. 

B.  Hedging  both  accounting  and  economic  risk  may  be  done  simultaneously  but  at 
a relatively  high  cost. 

C.  For  publicly  traded  companies,  there  is  no  clear  benefit  in  hedging  short-term  or 
long-term  accounting  profits. 

D.  The  use  of  a futures  contract  to  hedge  future  sales  receipts  may  assist  in 
matching  profits  for  accounting  purposes. 

4.  Lear,  Inc.,  is  a U.S.  wine  producer  that  purchases  a significant  amount  of  cork  for  its 
wine  bottles  from  Asia.  It  also  sells  much  of  its  wine  to  customers  throughout  North 
America.  Based  on  these  two  broad  transactions,  which  of  the  following  risks  does 
Lear,  Inc.,  most  likely  face? 

A.  Financial  position  risk  and  operational  risk. 

B.  Operational  risk  and  pricing  risk. 

C.  Pricing  risk  only. 

D.  Financial  position  risk,  operational  risk,  and  pricing  risk. 

3.  Which  of  the  following  statements  regarding  exchange-traded  and  over-the-counter 
(OTC)  financial  instruments  is  correct? 

A.  There  is  greater  liquidity  with  exchange-traded  financial  instruments. 

B.  There  is  greater  customization  with  exchange-traded  financial  instruments. 

C.  There  is  greater  price  transparency  with  OTC  financial  instruments. 

D.  There  is  credit  risk  by  either  of  the  counterparties  inherent  in  exchange- traded 
instruments. 
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Concept  Checker  Answers 


1 . B The  complexity  of  derivatives  pricing  means  the  pricing  may  not  always  be  as  accurate  as 

possible  so  it  will  not  always  reflect  all  of  the  relevant  risk  factors.  As  a result,  in  practice, 
hedging  with  derivatives  may  not  be  a zero-sum  game  of  transferring  risk  between  periods  or 
between  participants. 

Choice  A is  not  correct  because  hedging  involves  the  use  of  financial  derivatives  and 
insuring  involves  the  use  of  insurance  policies;  an  insurance  policy  is  not  considered  a 
financial  instrument  in  the  same  sense  as  a derivatives  instrument.  Choice  C is  not  correct 
because  the  existence  of  significant  costs  of  financial  distress  and  bankruptcy  is  contrary  to 
the  assumption  of  perfect  capital  markets.  Choice  D is  not  correct  because  hedging  with 
derivatives  will  require  disclosure,  including  some  operational  information  that  the  firm  may 
otherwise  prefer  to  keep  private. 

2.  A Risk  appetite  may  be  conveyed  in  a qualitative  and/or  quantitative  manner,  therefore, 

qualitative  alone  may  be  acceptable. 

Debtholders  would  likely  be  more  concerned  about  minimizing  all  risks  because  their  upside 
potential  is  generally  limited  to  the  rate  of  interest  charged.  In  contrast,  shareholders  may  be 
willing  for  the  firm  to  accept  a large  but  unlikely  risk  in  order  to  increase  equity  prices. 

3.  A The  use  of  a futures  contract  to  hedge  future  sales  receipts  must  take  into  account  that  sales 

revenue  is  recognized  only  upon  completion  of  transaction,  although  the  futures  contract 
requires  periodic  marking  to  market.  Therefore,  if  the  futures  contract  is  in  a “gain”  position 
at  the  end  of  the  year,  there  may  be  taxes  payable  prior  to  the  receipt  of  any  sales  receipts. 

Choice  B is  not  correct  because  it  is  not  possible  to  hedge  both  accounting  and  economic 
risk  at  the  same  time.  Choice  C is  not  correct  because  for  publicly  traded  companies,  stable 
reported  earnings  (achieved  by  hedging  short-term  vs.  long-term  accounting  profits)  often 
assist  with  maintaining  or  increasing  the  stock  price.  Choice  D is  not  correct  because  the 
use  of  a futures  contract  to  hedge  future  sales  receipts  will  result  in  a mismatch  of  profits  for 
accounting  purposes. 

4.  B Operational  risk  could  cover  activities  pertaining  to  Lear’s  input  products  (i.e.,  cork)  and 

products  exported  to  foreign  countries  (i.e.,  bottles  of  wine).  In  addition,  there  would  be 
pricing  risk  for  both  the  inputs  and  outputs.  For  example,  the  cost  of  the  cork  may  have 
a significant  impact  on  Lear’s  ability  to  conduct  business  in  a competitive  manner.  Also 
consider  that  Lear  has  sales  to  customers  in  foreign  countries  (with  payment  in  the  foreign 
currency)  where  there  is  the  risk  of  the  devaluation  of  the  foreign  currency  in  the  future. 
Financial  position  risk  refers  to  the  balance  sheet  of  a firm.  Neither  the  purchases  nor  the  sales 
impact  Lear’s  balance  sheet. 
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5.  A Exchange- traded  instruments  cover  only  certain  underlying  assets  and  are  quite  standardized 
in  order  to  promote  liquidity  in  the  marketplace.  As  a result,  there  is  less  customization 
with  exchange- traded  instruments.  OTC  financial  instruments,  in  exchange  for  greater 
customization,  are  less  liquid  and  more  difficult  to  price  compared  to  exchange-traded 
instruments.  In  addition,  there  is  credit  risk  by  either  of  the  counterparties  that  would 
generally  not  exist  with  exchange-traded  instruments. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  lo  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


Corporate  Governance  and  Risk 
Management 


Topic  3 

Exam  Focus 

This  topic  continues  the  coverage  of  risk  management  concepts  in  a qualitative  and  non- 
technical manner.  For  the  exam,  pay  close  attention  to  the  best  practices  in  corporate 
governance  and  risk  management.  In  addition,  understand  the  purpose  and  function  of  the 
main  board  committees,  such  as  risk  management,  compensation,  and  audit. 


Best  Practices 


LO  3.1:  Compare  and  contrast  best  practices  in  corporate  governance  with  those  of 
risk  management. 


Corporate  Governance 

The  board  of  directors  should  be  comprised  of  a majority  of  independent  members  in  order 
to  maintain  a sufficient  level  of  objectivity  with  regard  to  making  decisions  and  approving 
management  s decisions.  All  members  should  possess  a basic  knowledge  of  the  firms 
business  and  industry,  even  if  they  are  outside  of  the  industry.  Additionally,  those  who  lack 
knowledge  should  be  provided  some  supplemental  training  prior  to  joining  the  board. 

The  board  should  be  watching  out  for  the  interests  of  the  shareholders.  For  example,  on  a 
general  level,  the  board  would  have  to  approve  management’s  decision  to  assume  a certain 
risk  given  its  expected  return.  Also,  the  board  would  watch  out  for  the  interests  of  other 
stakeholders,  such  as  debtholders,  by  considering  if  any  of  management’s  decisions  contain 
extreme  downside  risk. 

The  board  should  be  aware  of  any  agency  risks  whereby  management  may  have  the 
incentive  to  take  on  greater  risks  in  order  to  maximize  personal  remuneration  (e.g.,  based 
on  short-term  increases  in  stock  price)  that  are  not  consistent  with  the  objectives  of  the 
stakeholders  in  terms  of  long-term  risk  levels.  As  a starting  point,  the  compensation 
committee  within  the  board  should  design  management  compensation  plans  so  they  are 
congruent  with  corporate  goals  in  addition  to  minimizing  or  reducing  agency  risk. 

The  board  should  maintain  its  independence  from  management.  A key  measure  involved 
would  be  that  the  chief  executive  officer  (CEO)  would  not  also  be  the  chairman  of  the 
board  because  there  is  already  an  inherent  conflict  with  the  CEO  being  on  both  the 
management  team  and  the  board  of  directors.  As  a result,  the  CEO  should  not  be  given 
additional  powers  on  the  board. 
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The  board  should  consider  the  introduction  of  a chief  risk  officer  (CRO).  The  CRO  would 
technically  be  a member  of  management  but  would  attend  board  meetings.  The  CRO’s 
objective  would  be  to  link  the  corporate  governance  duties  to  the  firm’s  risk  management 
objectives.  In  terms  of  reporting,  the  CRO  could  report  to  the  board  and/or  the 
management  team,  depending  on  the  specific  nature  of  the  CRO  role  within  the  firm. 

Risk  Management 

The  board  of  directors  should  demand  substance  over  form.  For  example,  business  and 
risk  management  strategies  should  strive  for  economic  performance,  not  accounting 
performance.  To  promote  a robust  risk  management  process  within  the  firm,  the  board 
should  ensure  sufficient  upward  mobility  in  terms  of  risk  management  careers,  appropriate 
staff  remuneration,  and  logical  reporting  relationships. 

The  board  should  set  up  an  ethics  committee  (either  within  the  board  or  within  the  firm)  to 
require  all  staff  to  adhere  to  the  firm’s  high  ethical  standards.  The  committee  could  also  be 
responsible  for  monitoring  duties  to  ensure  that  those  standards  are  upheld. 

Similar  to  the  issue  of  agency  risk  under  corporate  governance,  the  board  should  ensure  that 
performance  measurement  and  compensation  for  all  staff  is  consistent  with  the  firm’s  goals 
and  the  shareholders’  interests.  Specifically,  compensation  should  be  determined  based  on 
performance  on  a risk- adjusted  basis. 

The  board  must  provide  approval  on  all  major  transactions  after  ensuring  the  transactions 
are  within  the  established  risk  appetite  and  consistent  with  the  firms  overall  business 
strategy.  In  addition,  the  board  should  be  prepared  to  pose  probing  and  relevant  questions 
to  management  and  other  staff  in  the  context  of  professional  skepticism.  Corroborating 
information  from  a variety  of  sources  and  staff  should  increase  the  reliability  and  validity  of 
the  answers  obtained. 

The  board  should  have  a risk  committee  in  place.  Similar  to  the  corporate  governance 
best  practice  of  having  all  members  possessing  a basic  knowledge  of  the  firm’s  business  and 
industry,  all  risk  committee  members  need  to  understand  the  technical  risk  issues  (e.g.,  risk 
appetite,  relevant  time  period)  in  order  to  ask  appropriate  questions  and  make  informed 
decisions. 

The  risk  committee  should  be  separate  from  the  audit  committee  given  the  different 
knowledge  base  and  skills  required  in  each  area.  However,  it  may  be  useful  to  have  at  least 
one  board  member  on  both  committees  to  ensure  that  the  committees  are  working  toward 
the  same  corporate  objectives. 
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LO  3.2:  Assess  the  role  and  responsibilities  of  the  board  of  directors  in  risk 
governance. 

LO  3.4:  Distinguish  the  different  mechanisms  for  transmitting  risk  governance 
throughout  an  organization. 


In  terms  of  risk  governance,  the  board  has  some  important  responsibilities  that  could  be 
facilitated  with  the  involvement  of  a risk  advisory  director.  Given  the  specialized  role  of 
the  risk  management  and  compensation  committees,  the  specific  duties  of  the  risk  advisory 
director  are  highlighted  below. 

Risk  Advisory  Director 

A risk  advisory  director  would  be  a board  member  who  is  a risk  specialist  who  attends  risk 
committee  and  audit  committee  meetings  and  provides  advice  to  increase  effectiveness.  The 
risk  advisory  director  also  meets  with  senior  management  on  a regular  basis  and  could  be 
viewed  as  a liaison  between  the  board  and  management.  Overall,  the  role  would  involve 
educating  members  on  best  practices  in  both  corporate  governance  and  risk  management. 

More  specific  duties  of  the  director  (and  the  board  in  general)  would  include  the  review  and 
analysis  of  the  following: 

• The  firms  risk  management  policies. 

• The  firms  periodic  risk  management  reports. 

• The  firms  risk  appetite  and  its  impact  on  business  strategy. 

• The  firms  internal  controls. 

• The  firms  financial  statements  and  disclosures. 

• The  firms  related  parties  and  related  party  transactions. 

• Any  audit  reports  from  internal  or  external  audits. 

• Corporate  governance  best  practices  for  the  industry. 

• Risk  management  practices  of  competitors  and  the  industry. 

Risk  Management  Committee 

Using  a bank  as  an  example,  the  risk  management  committee  (within  the  board)  is 
responsible  for  identifying,  measuring,  and  monitoring  financial  risks  (i.e.,  credit,  market, 
liquidity).  The  committee  is  responsible  for  approving  credit  facilities  that  are  above  certain 
limits  or  within  limits  but  above  a specific  threshold.  In  addition,  the  committee  monitors 
the  composition  of  the  bank’s  lending  and  investment  portfolios  in  light  of  the  current 
economic  environment  in  terms  of  credit,  market,  and  liquidity  risk  to  determine  if  any 
changes  in  the  portfolio  composition  are  required. 

The  risk  management  committee  usually  maintains  an  open  line  of  communication  with 
the  external  audit,  internal  audit,  and  management  teams. 
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Compensation  Committee 

As  discussed  previously,  the  existence  of  agency  risk  necessitates  the  board  to  implement  a 
compensation  committee  to  ensure  appropriate  risk-taking  in  relation  to  the  long-term  risks 
assumed.  The  compensation  committee  is  independent  of  management.  Its  role  is  to  discuss 
and  approve  the  remuneration  of  key  management  personnel. 

Management  compensation  above  base  salary  should  be  congruent  with  the  goals  of  the 
other  stakeholders.  In  that  regard,  the  committee  should  avoid  designing  compensation 
plans  with  bonuses  based  on  short-term  profits  or  revenues  given  the  relative  ease  in 
which  management  may  manipulate  those  amounts.  Also,  there  could  be  the  absence 
of  any  guaranteed  bonuses  or  a cap  could  be  implemented  on  bonuses.  Furthermore, 
the  committee  may  consider  introducing  elements  of  downside  risk  with  management 
compensation.  For  example,  compensation  may  be  deferred  until  longer-term  results 
are  known  or  there  could  be  clawbacks  of  previous  bonuses  paid  if  long-term  results  are 
inconsistent  with  short-term  results. 

Stock-based  compensation  is  a potential  solution  to  align  management  and  shareholder 
interests.  However,  it  is  not  a perfect  solution  because  there  is  still  potential  for  management 
to  take  excessive  risks;  their  upside  potential  is  theoretically  unlimited  based  on  the  stock 
price  increase  but  their  downside  potential  is  limited  if  the  stock  becomes  worthless. 

Another  idea  would  be  to  provide  “bonus  bonds”  as  compensation  that  would  be  taken 
away  should  a specific  regulatory  ratio  requirement  be  breached. 

Audit  Committee 


LO  3.6:  Assess  the  role  and  responsibilities  of  a firms  audit  committee. 


The  audit  committee  (as  part  of  the  board)  has  traditionally  been  responsible  for  the 
reasonable  accuracy  of  the  firm’s  financial  statements  and  its  regulatory  reporting 
requirements.  It  must  ensure  that  the  firm  has  taken  all  steps  to  avoid  the  risk  that  the 
financial  statements  are  materially  misstated  as  a result  of  undiscovered  errors  and/or 
fraud.  In  addition  to  the  more  visible  verification  duties,  the  audit  committee  monitors  the 
underlying  systems  in  place  regarding  financial  reporting,  regulatory  compliance,  internal 
controls,  and  risk  management.  In  that  respect,  the  audit  committee  may  be  able  to  rely 
on  some  or  all  of  the  work  of  the  internal  audit  team,  which  usually  reports  directly  to  the 
audit  committee. 

All  members  of  the  audit  committee  must  possess  sufficient  financial  knowledge  in  order 
to  perform  in  their  role.  This  requires  an  understanding  of  the  relevant  accounting  rules 
(e.g.,  U.S.  GAAP,  IFRS),  financial  statements,  and  internal  controls.  As  a collective,  there 
should  be  a proper  balance  of  independence,  knowledge  of  the  business,  and  ability  to  ask 
probing  and  relevant  questions.  The  audit  committee  is  largely  meant  to  be  independent  of 
management  but  it  should  work  with  management  and  communicate  frequently  to  ensure 
that  any  issues  arising  are  addressed  and  resolved. 

Finally,  there  should  be  responsibilities  for  the  audit  committee  in  terms  of  meeting 
minimum  (or  higher)  standards  in  areas  such  as  legal,  compliance,  and  risk  management. 
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There  could  also  be  duties  related  to  optimizing  the  firm’s  operations  in  terms  of 
effectiveness  and  efficiency. 

Risk  Appetite  and  Business  Strategy 


LO  3-3:  Evaluate  the  relationship  between  a firms  risk  appetite  and  its  business 
strategy. 


A firm’s  risk  appetite  reflects  its  tolerance  (especially  willingness)  to  accept  risk.  The 
subsequent  implementation  of  the  risk  appetite  into  defining  the  firm’s  risk  limits  sets  some 
bounds  to  its  business  strategy  and  to  its  ability  to  exploit  business  opportunities.  The  board 
needs  to  develop/ approve  the  firm’s  risk  appetite  as  well  as  assist  management  in  developing 
the  firm’s  overall  strategic  plan. 

There  must  be  a logical  relationship  between  the  firm’s  risk  appetite  and  its  business  strategy. 
As  a result,  business  strategy  planning  meetings  require  input  from  the  risk  management 
team  right  from  the  outset  to  ensure  the  consistency  between  risk  appetite  and  business 
strategy.  For  example,  planning  activities  are  often  focused  on  maximizing  the  firm’s  profit 
but  some  planned  activities  may  need  to  be  eliminated  or  modified  because  they  exceed 
the  stated  risk  appetite.  Furthermore,  the  scope  of  some  planned  activities  may  be  too  large 
in  the  context  of  the  firm’s  total  assets  or  equity.  Consideration  must  also  be  given  to  the 
downside  risks  of  any  business  strategy.  Once  a risk  management  plan  is  set  that  takes  into 
account  both  risk  appetite  and  business  strategy,  there  must  be  a process  in  place  to  identify, 
evaluate,  and  manage  all  relevant  risks  faced  by  the  firm. 

Interdependence  of  Functional  Units 


LO  3.5:  Illustrate  the  interdependence  of  functional  units  within  a firm  as  it  relates 
to  risk  management. 


The  various  functional  units  within  a firm  are  dependent  on  one  another  when  it  comes 
to  risk  management  and  reporting.  All  transactions  must  be  recorded  correctly  and  in  the 
appropriate  period  in  order  to  ensure  the  accuracy  of  the  periodic  profit  and  loss  (P&L) 
statements.  Using  an  investment  bank,  consider  five  separate  units:  (1)  senior  management, 
(2)  risk  management,  (3)  trading  room  management,  (4)  operations,  and  (5)  finance.  The 
interdependence  of  managing  risk  among  these  functional  units  is  illustrated  in  Figure  1. 
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Figure  1:  Interdependence 


Senior  Management 

• Approves  business  plans  and  targets 

• Sets  risk  tolerance 

• Establishes  policy 

• Ensures  performance 


— ► Trading  Room  Management 

• Establishes  and  manages  risk  exposure 

• Ensures  timely,  accurate,  and  complete  deal  capture 

• Signs  off  on  official  P&L 


Risk  Management 

• Develops  risk  policies 

• Monitors  compliance  to  limits 

• Manages  risk  committee  process 

• Vets  models  and  spreadsheets 

• Provides  independent  view  on  risk 

• Supports  business  needs 


Operations 

• Books  and  settles  trades 

• Reconciles  front-  and  back-office  positions 

■ Prepares  and  decomposes  daily  P&L 

• Provides  independent  mark  to  market 

■ Supports  business  needs 


Finance 

• Develops  valuation  and  finance  policy 

• Ensures  integrity  of  P&L 

• Manages  business  planning  process 

• Supports  business  needs 


Crouhy,  M.,  Galai,  D.,  & Mark,  R.  (2014).  Chapter  4:  Corporate  Governance  and  Risk 
Management  (Figure  4-2).  The  Essentials  of  Risk  Management  (2nd  edition).  New  York:  McGraw- 
Hill,  2014. 


There  are  many  examples  of  interdependence  among  the  functional  units.  Overall,  the 
operations  unit  is  extremely  important  to  all  the  other  units  in  terms  of  generating  and 
maintaining  the  data  needed  to  manage  risk.  All  trades  are  recorded  and  all  reconciliations 
are  performed  within  operations. 

The  finance  unit  develops  valuation  and  finance  policies.  Those  valuation  policies  are 
subsequently  applied  by  the  operations  unit  when  it  prepares  asset  valuations.  The  P&L 
statement  (i.e.,  income  statement)  is  developed  by  the  operations  and  finance  units  and 
ultimately  approved  by  trading  room  management.  Note  the  consistent  support  of  the 
banks  business  needs  by  the  risk  management,  operations,  and  finance  units. 
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Key  Concepts 


LO  3.1 

There  are  numerous  best  practices  in  corporate  governance,  including: 

• Board  is  comprised  of  a majority  of  independent  members  with  basic  knowledge  of  the 
firm’s  business  and  industry. 

• Board  watches  out  for  the  interests  of  all  stakeholders,  including  shareholders  and 
debtholders  who  may  have  somewhat  differing  interests. 

• Board  is  aware  of  any  agency  risks  and  takes  steps  to  reduce  them  (e.g.,  compensation 
committee). 

• Board  maintains  its  independence  from  management  (e.g.,  CEO  is  not  the  chairman  of 
the  board). 

• Board  should  consider  the  introduction  of  a chief  risk  officer. 

There  are  numerous  best  practices  in  risk  management,  including: 

• Board  should  focus  on  the  firm’s  economic  performance  over  accounting  performance. 

• Board  should  promote  a robust  risk  management  process  within  the  firm  (e.g.,  upward 
mobility  for  risk  management  careers). 

• Board  should  set  up  an  ethics  committee  to  uphold  high  ethical  standards  within  the 
firm. 

• Board  should  ensure  that  compensation  is  based  on  risk-adjusted  performance. 

• Board  should  approve  all  major  transactions. 

• Board  should  always  apply  professional  skepticism  to  ask  probing  and  relevant  questions 
to  management. 

• Board  should  have  a risk  committee  in  place. 


LO  3.2 

The  role  of  the  board  of  directors  in  governance  would  include  the  review  and  analysis  of: 

• The  firm’s  risk  management  policies. 

• The  firm’s  periodic  risk  management  reports. 

• The  firm’s  appetite  and  its  impact  on  business  strategy. 

• The  firm’s  internal  controls. 

• The  firm’s  financial  statements  and  disclosures. 

• The  firm’s  related  parties  and  related  party  transactions. 

• Any  audit  reports  from  internal  or  external  audits. 

• Corporate  governance  best  practices  for  the  industry. 

• Risk  management  practices  of  competitors  and  the  industry. 


LO  3.3 

A firm’s  risk  appetite  reflects  its  tolerance  (especially  willingness)  to  accept  risk.  There 
is  subsequent  implementation  of  the  risk  appetite  into  defining  the  firm’s  risk  limits. 
Ultimately,  there  must  be  a logical  relationship  between  the  firm’s  risk  appetite  and  its 
business  strategy. 


©2015  Kaplan,  Inc. 


Page  33 


Topic  3 

Cross  Reference  to  GARP  Assigned  Reading  - Crouhy,  Galai,  and  Mark,  Chapter  4 


LO  3.4 

Two  mechanisms  for  transmitting  risk  governance  throughout  a firm  are  the  audit 
committee  of  the  board  and  the  use  of  a risk  advisory  director.  Additionally,  the  role  of 
the  risk  management  committee  and  the  compensation  committee  further  transmit  risk 
governance. 


LO  3.5 

The  various  functional  units  within  a firm  are  dependent  on  one  another  when  it  comes 
to  risk  management  and  reporting.  Using  an  investment  bank  as  an  example,  areas  such 
as  valuations,  the  profit  and  loss  statement,  and  risk  policy  require  input  from  more  than 
one  of  the  following  units:  (1)  senior  management,  (2)  risk  management,  (3)  trading  room 
management,  (4)  operations,  and  (5)  finance. 


LO  3.6 

The  audit  committee  is  responsible  for  the  reasonable  accuracy  of  the  firm’s  financial 
statements  and  its  regulatory  reporting  requirements.  It  must  ensure  that  the  firm  has  taken 
all  steps  to  avoid  the  risk  that  the  financial  statements  are  materially  misstated  as  a result 
of  undiscovered  errors  and/or  fraud.  In  addition  to  the  more  visible  verification  duties,  the 
audit  committee  monitors  the  underlying  systems  in  place  regarding  financial  reporting, 
regulatory  compliance,  internal  controls,  and  risk  management. 
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Concept  Checkers 


1.  Which  of  the  following  statements  about  best  practices  in  corporate  governance  and 
risk  management  is  most  accurate? 

A.  The  board  should  keep  the  risk  committee  separate  from  the  audit  committee. 

B.  The  board  should  ensure  that  it  has  the  firm’s  chief  risk  officer  as  a member  of 
the  board. 

C.  The  board  should  focus  on  management’s  actions  and  their  impact  on  the 
interests  of  the  firm’s  shareholders. 

D.  The  board  should  focus  on  accounting  performance  instead  of  economic 
performance  because  of  the  importance  of  maintaining  or  enhancing  the  firm’s 
stock  price. 

2.  The  role  of  the  risk  advisory  director  on  the  hoard  is  important  in  ensuring  sufficient 
risk  oversight  of  the  firm  by  the  board.  Which  of  the  following  specific  items  would 
the  risk  advisory  director  review  and  analyze? 

I.  Internal  audit  reports. 

II.  Information  on  the  firm’s  related  parties. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

3.  Which  of  the  following  statements  regarding  the  firm’s  risk  appetite  and/or  its 
business  strategy  is  most  accurate? 

A.  The  firm’s  risk  appetite  does  not  consider  its  willingness  to  accept  risk. 

B.  The  board  needs  to  work  with  management  to  develop  the  firm’s  overall  strategic 
plan. 

C.  Management  will  set  the  firm’s  risk  appetite  and  the  board  will  provide  its 
approval  of  the  strategic  plan. 

D.  Management  should  obtain  the  risk  management  team’s  approval  once  the 
business  planning  process  is  finalized. 

4.  The  various  responsibilities  surrounding  the  profit  and  loss  (P&L)  statement 
illustrate  the  importance  of  understanding  the  interdependence  of  managing  risk 
within  a firm.  Within  an  investment  bank,  which  functional  unit  is  most  likely  to 
provide  final  approval  of  the  P&L? 

A.  Finance. 

B.  Operations. 

C.  Senior  management. 

D.  Trading  room  management. 

5.  Which  of  the  following  statements  regarding  the  role  of  the  firm’s  audit  committee  is 
most  accurate? 

A.  At  least  one  member  of  the  audit  committee  must  possess  sufficient  financial 
knowledge. 

B.  The  audit  committee  may  consist  of  some  members  of  the  management  team. 

C.  The  audit  committee  is  only  responsible  for  the  accuracy  of  the  financial 
statements. 

D.  The  audit  committee  is  meant  to  work  dependently  with  management. 
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Concept  Checker  Answers 


1.  A The  risk  committee  should  be  separate  from  the  audit  committee  given  the  different 

knowledge  base  and  skills  required  in  each  area. 

Choice  B is  not  correct  because  the  firm  s chief  risk  officer  (CRO)  is  technically  a member 
of  management  but  does  attend  board  meetings  regularly.  Although  the  CRO  may  report  to 
management  and/or  the  board,  the  CRO  should  not  be  a member  of  the  board.  Choice  C 
is  not  correct  because  the  board  should  consider  the  impact  on  all  of  the  firm  s stakeholders 
(i.e.,  debtholders,  shareholders)  and  not  just  the  shareholders.  Choice  D is  not  correct 
because  the  board  should  ensure  that  business  and  risk  management  strategies  should  strive 
for  economic  performance,  not  accounting  performance. 

2.  C The  risk  advisory  director  should  review  and  analyze  internal  audit  reports  and  information 

on  the  firm’s  related  parties  because  they  are  directly  relevant  in  assessing  the  firm’s  risk  level 
from  the  board’s  perspective. 

3.  B The  board  needs  to  develop/approve  the  firm’s  risk  appetite  as  well  as  assist  management  in 

developing  the  firm’s  overall  strategic  plan. 

Choice  A is  not  correct  because  the  firm’s  risk  appetite  considers  its  willingness  to  accept 
risk.  Choice  C is  not  correct  because  both  management  and  the  board  will  set  the  firm’s  risk 
appetite.  Choice  D is  not  correct  because  management  should  involve  the  risk  management 
team  in  the  business  planning  process  right  from  the  outset  to  ensure  the  consistency 
between  risk  appetite  and  business  strategy. 

4.  D Trading  room  management  is  responsible  for  signing  off  on  the  official  P&L.  Choice  A is 

not  correct  because  the  finance  unit  ensures  the  integrity  of  the  P&L.  Choice  B is  not  correct 
because  the  operations  unit  prepares  and  decomposes  the  daily  P&L.  Choice  C is  not  correct 
because  senior  management  does  not  have  any  responsibilities  for  the  P&L  from  a risk 
management  perspective. 

5.  B The  audit  committee  consists  primarily  of  non-management  members  but  there  may  be 

some  management  members  (c.g.,  chief  financial  officer). 

All  members  of  the  audit  committee  must  possess  sufficient  financial  knowledge.  The  audit 
committee  is  responsible  for  the  accuracy  of  the  financial  statements  but  that  alone  does  not 
comprise  its  main  responsibility.  Additionally,  the  audit  committee  monitors  the  underlying 
systems  in  place  regarding  financial  reporting,  regulatory  compliance,  internal  controls,  and 
risk  management.  The  audit  committee  is  largely  meant  to  be  independent  of  management 
but  it  should  work  with  management  and  communicate  frequently  to  ensure  that  any  issues 
arising  are  addressed  and  resolved. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

What  is  ERM? 


Topic  4 


Exam  Focus 

Enterprise  risk  management  (ERM)  is  a relatively  recent  concept  that  emerged  in  response  to 
moving  away  from  the  traditional  approach  to  risk  management  under  which  each  risk  was 
assessed,  managed,  and  mitigated  separately  by  a specific  unit  within  the  firm.  In  this  topic, 
you  will  gain  familiarity  with  the  concept  and  definitions  of  ERM,  its  benefits  and  costs,  and 
the  seven  major  components  of  ERM.  The  role  of  the  chief  risk  officer  can  also  be  a critical 
component  in  the  implementation  and  success  of  the  ERM  program  across  the  firm.  For  the 
exam,  be  familiar  with  the  three  motivations  of  the  ERM  program,  and  understand  each  of 
the  seven  components  of  a successful  ERM  program. 


Enterprise  Risk  Management 


LO  4.1:  Describe  enterprise  risk  management  (ERM)  and  compare  and  contrast 
differing  definitions  of  ERM. 


Companies  face  a variety  of  risks  that  arise  from  company  operations,  including  but  not 
limited  to:  credit,  market,  liquidity,  operational,  business,  and  information  technology  (IT) 
risks.  Within  the  traditional  approach  to  risk  management,  each  of  these  primary  risk  types 
was  evaluated  by  a specific  unit  within  the  organization  in  isolation,  independent  of  the 
other  risk  types.  For  example,  a company’s  traders  were  responsible  for  managing  market 
risk,  actuaries  managed  insurance  risk,  and  management  analyzed  business  risk. 

While  the  traditional  approach  may  have  been  adequate  in  a less  volatile  market 
environment,  it  suffers  from  the  shortcoming  of  ignoring  the  dynamic  nature  of  risks  and 
their  interdependencies.  One  risk  type  can  affect  another,  and  risks  (or  their  hedges)  can 
be  offsetting  if  viewed  from  the  perspective  of  the  entire  company.  Treating  each  primary 
risk  type  in  isolation  ignores  these  interdependencies  and  can  result  in  inefficient  and  costly 
overhedging  of  risks  at  the  firm  level.  In  addition,  the  various  functional  units  responsible 
for  evaluating  and  measuring  risks  may  all  use  different  methodologies  and  formats  in  their 
risk  measurements.  Without  a centralized  risk  management  system,  a company’s  senior 
management  and  its  board  of  directors  would  receive  fragmented  information  from  the 
various  units,  each  potentially  utilizing  different  measurement  methods. 

Given  the  noted  shortcomings  of  the  traditional  approach,  an  integrated  and  centralized 
framework  would  significantly  increase  the  efficiency  of  managing  company  risks.  Such  a 
centralized  approach  is  referred  to  as  enterprise  risk  management  (ERM). 
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ERM  Definitions 


Since  the  concept  of  ERM  is  relatively  new  and  is  still  evolving,  there  is  a lack  of  a standard 
ERM  definition.  ERM  is  often  defined  as  a process  or  activity  to  manage  risks.  For  example, 
the  following  definition  was  provided  by  the  Committee  of  Sponsoring  Organizations  of  the 
Treadway  Commission  (COSO)  in  2004: 

“ ERM  is  a process , effected  by  an  entity's  board  of  directors,  management,  and  other  personnel, 
applied  in  strategy  setting  and  across  the  enterprise,  designed  to  identify  potential  events 
that  may  affect  the  entity,  and  manage  risk  to  be  within  its  appetite,  to  provide  reasonable 
assurance  regarding  the  achievement  of  entity  objectives.  n 

The  International  Organization  of  Standardization  (ISO  3000)  provides  the  following 
definition: 

“ Risk  is  the  effect  of  uncertainty  on  objectives  and  risk  management  refers  to  coordinated 
activities  to  direct  and  control  an  organization  with  regard  to  risk.  ” 

Both  of  the  previous  definitions  contain  useful  ideas  of  ERM,  but  they  do  not  define  it  as  a 
value-added  concept.  As  a result,  a more  useful  definition  of  ERM  is  as  follows: 

“Risk  is  a variable  that  can  cause  deviation  from  an  expected  outcome.  ERM  is  a 
comprehensive  and  integrated  framework  for  managing  key  risks  in  order  to  achieve  business 
objectives,  minimize  unexpected  earnings  volatility,  and  maximize  firm  value. ” 1 

ERM  is  crucial  in  establishing  a firm-wide,  integrated  set  of  policies,  procedures,  and 
standards.  From  senior  management’s  perspective,  an  ERM  system  provides  an  invaluable 
overall  risk  perspective  and  control. 


ERM  Benefits  and  Costs 


LO  4.2:  Compare  the  benefits  and  costs  of  ERM  and  describe  the  motivations  for  a 
firm  to  adopt  an  ERM  initiative. 


There  are  three  primary  motivations  for  a firm  to  implement  an  ERM  initiative: 

(1)  integration  of  risk  organization,  (2)  integration  of  risk  transfer,  and  (3)  integration  of 
business  processes.  The  respective  benefits  are  better  organizational  effectiveness,  better  risk 
reporting,  and  improved  business  performance.  However,  implementation  of  an  integrated 
firm-wide  initiative  is  cosdy  (both  capital  and  labor  intensive)  and  time-consuming.  This 
process  could  last  several  years  and  requires  ongoing  senior  management  and  board  support. 

Integration  of  Risk  Organization:  Increased  Organizational  Effectiveness 

While  most  companies  have  many  individual  risk  management  functions,  including  market, 
credit,  and  various  other  risk  units,  an  effective  ERM  strategy  aggregates  these  risks  under 
a centralized  risk  management  process.  Under  a centralized  process,  the  role  of  a chief 

1 James  Lam,  Enterprise  Risk  Management:  From  Incentives  to  Controls , 2nd  Edition,  (Hoboken, 

NJ:  John  Wiley  &c  Sons,  2014),  53. 
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risk  officer  (CRO)  is  often  created,  which  reports  to  the  company's  chief  executive  officer 
(CEO)  and/or  the  board,  while  the  various  risk  management  units  report  to  the  CRO.  The 
benefit  of  a centralized  approach  is  a top-down,  coordinated  framework  that  factors  in  the 
relationships  and  interdependencies  of  various  risks. 

Integration  of  Risk  Transfer:  Better  Risk  Reporting 

Under  the  traditional,  non-ERM  approach,  the  various  risks  facing  the  company  were 
evaluated  by  individual  units  within  the  organization,  where  each  unit  managed  its  own 
risk.  For  example,  market  risk  was  managed  through  derivatives,  while  operational  risk 
was  managed  with  insurance.  This  approach  is  useful  in  mitigating  isolated  risks,  but  it 
does  not  account  for  diversification  within  or  across  the  various  risk  types,  which  could 
lead  to  over-hedging  of  risks  or  taking  out  excessive  insurance  coverage.  Further,  since  no 
one  unit  is  responsible  for  overall  risk  reporting,  reporting  of  risks  can  be  inconsistent  and 
contradictory. 

By  contrast,  ERM  enables  the  company  to  take  a holistic  view  of  ail  risks  and  risk  hedges 
used  in  order  to  hedge  only  those  undesirable  residual  risks  that  still  remain  after  factoring 
in  diversification  across  risks.  Risks  are  categorized  under  a risk  dashboard  of  key  risks, 
which  includes  an  enterprise  level  description  of  key  exposures,  total  losses,  policy 
exceptions,  and  even  early  warning  indicators.  Senior  management  and  the  board  are, 
therefore,  able  to  take  a big  picture  view  of  the  interplay  between  each  of  the  risks  and  can 
take  appropriate  measures  to  mitigate  any  residual  risk. 

Integration  of  Business  Processes:  Improved  Business  Performance 

The  third  element  of  ERM  is  integrating  risk  management  into  the  company’s  business 
processes.  ERM  can  optimize  business  performance  through  business  decisions,  including 
capital  allocation,  product  development  and  pricing,  and  efficient  allocation  of  resources. 
This  optimization  results  in  reduced  risk  and  only  takes  on  the  most  profitable  risks 
(i.e.,  maintains  only  those  risks  whose  cost  is  less  than  the  benefit  of  the  corresponding 
project).  Traditional  risk  measures  such  as  value  at  risk  (VaR)  and  risk-adjusted  return  on 
capital  (RAROC)  have  been  increasingly  used  to  measure  not  only  market  risk  but  also 
credit  and  operational  risk,  while  alternative  risk  measures  such  as  credit  derivatives  are 
increasingly  used  to  mitigate  additional  risks.  The  end  result  is  a reduction  in  losses,  lower 
earnings  volatility,  increased  earnings,  and  higher  shareholder  value. 

An  effective  ERM  initiative  allows  company  management  to  understand  the  major  risk 
exposures  and  to  set  up  adequate  risk  reporting.  At  the  same  time,  auditors  and  regulators 
assess  the  company’s  ERM  and  set  the  necessary  capital  and  compliance  requirements  for 
the  board  and  senior  management.  In  order  to  adequately  address  these  requirements,  the 
role  of  a “risk  champion”  has  become  more  widespread,  typically  in  the  position  of  a CRO. 
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The  Chief  Risk  Officer 


LO  4.3:  Describe  the  role  and  responsibilities  of  a chief  risk  officer  (CRO)  and 
assess  how  the  CRO  should  interact  with  other  senior  management. 


The  specific  role  of  the  CRO  was  created  in  the  early  1990s  in  response  to  the  emergence  of 
new  financial  instruments  and  the  integration  of  capital  markets.  The  CRO  is  responsible 
for  all  risks  facing  a company,  including  market,  credit,  operational,  and  liquidity  risks, 
and  specifically  responsible  for  developing  and  implementing  an  ERM  strategy.  The  role 
is  prominent  among  financial  firms,  firms  with  significant  investment  activities  or  foreign 
operations,  and  energy  firms. 

The  CRO  is  a top-level  executive  responsible  for  overall  risk  management  in  a centralized 
role.  Reporting  to  the  CRO  typically  are  the  heads  of  the  various  risk  functions,  including 
the  heads  of  credit,  market,  operational,  and  insurance  risks.  The  CRO  provides  overall 
leadership,  vision,  and  direction  for  ERM  and  develops  a framework  of  management 
policies,  including  setting  the  overall  risk  appetite  of  the  firm.  This  includes  measuring 
and  quantifying  risks  and  setting  risk  limits,  developing  the  requisite  risk  systems,  and 
communicating  a clear  vision  of  the  firm’s  risk  profile  to  the  board  and  to  key  stakeholders. 

Within  the  firm’s  hierarchy,  the  CRO  typically  reports  to  the  CEO  or  the  chief  financial 
officer  (CFO);  however,  the  role  is  placed  somewhere  between  the  CEO/CFO  and  the 
board.  Often  there  is  a dotted  line  relationship  with  dual  reporting  to  both  the  CEO/CFO 
and  to  the  board.  The  dotted  line  relationship  is  intended  to  minimize  any  potential  friction 
between  the  CRO  and  the  firm’s  CEO  or  other  top  executives  due  potentially  to  excessive 
risk  taking,  regulatory  issues,  or  outright  fraud  by  the  CEO  or  executives.  In  order  to 
properly  establish  the  reporting  structure,  it  is  important  that  the  role  of  the  CRO  is  clearly 
defined  with  clear  goals  and  responsibilities  for  hiring  and  firing  decisions. 

Of  course,  the  creation  of  the  CRO  role  is  not  the  only  solution  to  establishing  top-level 
risk  oversight.  The  firm’s  audit  committee  could  also  take  on  this  role;  however,  the  audit 
functions  are  typically  already  stretched  in  their  capacity  to  take  on  additional  oversight 
roles.  The  centralization  of  all  risk  responsibilities  could  also  be  assigned  to  the  CEO  or 
CFO;  however,  there  is  strong  support  for  establishing  a separate  oversight  function  in  the 
role  of  the  CRO  who  has  experience  and  focused  responsibility  for  risk  management. 

Over  the  last  couple  of  decades,  the  CRO  position,  with  its  focused  approach  to  risk 
management,  has  provided  greater  visibility  and  effectiveness  to  the  role  and  to  ERM.  The 
role  now  represents  the  culmination  of  the  risk  executive  functions  with  escalating  salaries, 
and  a company’s  CRO  is  often  a contender  for  the  highest  executive  roles  including  the 
role  of  the  CEO.  An  ideal  CRO  possesses  five  critical  skills:  (1)  leadership,  (2)  power  of 
persuasion,  (3)  ability  to  protect  the  firm’s  assets,  (4)  technical  skills  to  understand  all  risks, 
and  (3)  consulting  skills  to  educate  the  board  and  business  functions  on  risk  management. 
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LO  4.4:  Distinguish  between  components  of  an  ERM  program. 


There  are  seven  components  of  a strong  ERM  framework:  (1)  corporate  governance,  (2)  line 
management,  (3)  portfolio  management,  (4)  risk  transfer,  (3)  risk  analytics,  (6)  data  and 
technology  resources,  and  (7)  stakeholder  management. 

Corporate  governance  is  critical  in  the  implementation  of  a successful  ERM  program  and 
ensures  that  senior  management  and  the  board  have  the  requisite  organizational  practices 
and  processes  to  adequately  control  risks.  Corporate  governance  practices  have  evolved 
considerably  through  recent  regulatory  initiatives  including  the  Turnbull  Report  and  the 
Sarbanes- Oxley  Act.  A successful  corporate  governance  framework  requires  that  senior 
management  and  the  board  adequately  define  the  firm’s  risk  appetite  and  risk  and  loss 
tolerance  levels.  In  addition,  management  should  remain  committed  to  risk  initiatives  and 
ensures  that  the  firm  has  the  required  risk  management  skills  and  organizational  structure 
to  successfully  implement  the  ERM  program.  An  effective  framework  also  requires  that 
all  key  risks  are  successfully  integrated  into  the  ERM  program  and  those  responsible  for 
implementing  the  program  have  clearly  defined  risk  roles  and  responsibilities,  including  the 
role  of  the  CRO.  Oversight,  audit,  and  monitoring  targets  are  also  crucial  components  of 
the  ERM  governance  process. 

Line  management  is  the  management  of  activities  that  relate  directly  to  producing  a firm’s 
products  and  services.  Line  management  is  critical  as  it  integrates  business  strategy  into 
corporate  risk  policy,  assesses  the  relevant  risks,  and  incorporates  them  into  pricing  and 
profitability  decisions.  The  assessment  process  should  include  adequate  due  diligence  to 
determine  which  risks  line  managers  can  accept  without  senior  management  or  board 
approval.  In  terms  of  addressing  relevant  risks,  managers  should  include  the  cost  of  risk 
capital  and  expected  losses  in  decisions  about  product  pricing  or  investment  returns. 

Portfolio  management  provides  a holistic  view  of  the  firms  risks  if  these  risks  are  viewed  as 
individual  components  of  the  aggregate  risks  facing  the  firm.  Active  portfolio  management 
aggregates  risk  exposures  and  allows  for  diversification  of  risks  (partly  through  offsetting  risk 
positions)  and  prudent  monitoring  of  risk  concentrations  against  preset  limits.  Firms  that 
manage  each  of  their  financial  risks  independently  will  need  to  integrate  these  risks  into  a 
comprehensive  ERM  process  to  optimize  firm  risk  and  return. 

Risk  transfer  reduces  or  transfers  out  risks  that  are  either  undesirable  risks  or  are  desirable 
but  considered  concentrated  (i.e.,  excessive  risks).  Concentrated  risks  can  be  especially  risky 
for  a company,  and  it  is  crucial  that  these  positions  are  adequately  monitored  and  mitigated. 
Risks  could  also  be  transferred  to  third  parties  if  it  is  more  cost  effective  to  manage  them 
externally.  Risks  can  be  offloaded  through  derivatives,  insurance,  and  hybrid  products. 
Natural  hedges  within  the  portfolio  could  also  be  incorporated  into  the  risk  transfer  process 
to  reduce  hedging  and  insurance  costs,  even  in  the  absence  of  third-party  protection. 

Risk  analytics  quantifies  risk  exposures  for  use  in  risk  analysis,  measurement,  and 
reporting.  Many  of  the  risks  facing  the  firm  can  be  quantified  including  credit,  market, 
and  operational  risk.  Risk  analytics  can  be  used  to  calculate  the  cost-effective  way  of 
reducing  risk  exposures.  It  is  also  useful  in  evaluating  the  cost  of  managing  risks  in-house 
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or  externally  as  long  as  the  cost  of  managing  them  externally  is  cheaper.  The  analysis  and 
quantification  of  various  risks  can  ultimately  increase  shareholder  value,  boosting  net 
present  value  (NPV)  and  economic  value  added  (EVA). 

Data  technology  and  resources  improve  the  quality  of  data  used  in  evaluating  risks. 
Management  faces  the  challenge  that  various  systems  used  by  the  firm  capture  different 
price,  volatility,  or  correlation  metrics.  Data  technology  and  resources  can  mitigate  these 
challenges  by  being  incorporated  into  the  firms  ERM  program.  Even  if  the  technological 
resources  available  to  the  firm  are  not  perfect,  firms  should  incorporate  them  into  the  ERM 
system  as  early  as  possible. 

Stakeholder  management  facilitates  communicating  a firms  internal  risk  management 
process  to  external  stakeholders,  including  shareholders,  creditors,  regulators,  and  the 
public.  The  information  shared  with  stakeholders  is  also  important  for  rating  agencies 
and  analysts  as  they  use  this  information  in  developing  their  research  and  credit  opinions. 

A firms  internal  risk  management  should  be  transparent  to  stakeholders,  should  provide 
adequate  assurances  that  management  follows  prudent  risk  practices,  and  should  include 
regular  updates  on  the  key  risk  factors  facing  the  organization. 
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Key  Concepts 


LO  4.1 

An  integrated  and  centralized  approach  under  ERM  is  significantly  more  effective  in 
managing  a company’s  risks  than  under  the  traditional  silo  approach  of  managing  and 
centralizing  risks  within  each  risk/business  unit.  ERM  is  a comprehensive  and  integrated 
framework  for  managing  a firms  key  risks  to  meet  business  objectives,  minimize  unexpected 
earnings  volatility,  and  maximize  firm  value. 


LO  4.2 

The  key  motivations  of  an  ERM  initiative  include  integration  of  risk  organization, 
integration  of  risk  transfer,  and  integration  of  business  processes,  which  lead  to  increased 
organizational  effectiveness,  better  risk  reporting,  and  improved  business  performance, 
respectively. 


LO  4.3 

The  chief  risk  officer  (CRO)  is  responsible  for  all  risks  facing  a company,  including  market, 
credit,  and  operational  risks  and  is  responsible  for  developing  and  implementing  an  ERM 
strategy.  The  CRO  provides  overall  leadership  for  ERM  and  develops  policies  and  standards, 
including  setting  the  firms  overall  risk  appetite,  measuring  and  quantifying  risks  and  setting 
risk  limits,  and  developing  risk  systems. 

The  CRO  generally  reports  to  the  CEO  or  CFO  but  could  also  have  a dotted  line 
relationship  to  both  the  CEO/CFO  and  to  the  board  to  minimize  any  potential  friction 
between  the  CRO  and  the  CEO/CFO  (due  to  excessive  risk  taking,  regulatory  issues,  or 
fraud). 

An  ideal  CRO  possesses  five  critical  skills:  (1)  leadership,  (2)  power  of  persuasion,  (3)  ability 
to  protect  the  firm’s  assets,  (4)  technical  skills  to  understand  all  risks,  and  (5)  consulting 
skills  to  educate  the  board  and  business  functions  on  risk  management. 


LO  4.4 

A strong  ERM  framework  has  seven  main  components:  (1)  corporate  governance,  (2)  line 
management,  (3)  portfolio  management,  (4)  risk  transfer,  (5)  risk  analytics,  (6)  data  and 
technology  resources,  and  (7)  stakeholder  management. 
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Concept  Checkers 


1.  The  basis  of  enterprise  risk  management  (ERM)  is  that: 

A.  risks  are  managed  within  each  risk  unit  but  centralized  at  the  senior 
management  level. 

B.  the  silo  approach  to  risk  management  is  the  optimal  risk  management  strategy. 

C.  risks  should  be  managed  and  centralized  within  each  risk  unit. 

D.  it  is  necessary  to  appoint  a chief  risk  officer  to  oversee  most  risks. 

2.  Jimi  Chong  is  a risk  analyst  at  a mid-sized  financial  institution.  He  has  recently 
come  across  an  article  that  described  the  enterprise  risk  management  (ERM) 
process.  Chong  does  not  believe  this  is  a well-written  article,  and  he  identified  four 
statements  that  he  thinks  are  incorrect.  Which  of  the  following  statements  identified 
by  Chong  is  actually  correct? 

A.  One  of  the  drawbacks  of  a fully  centralized  ERM  process  is  over-hedging  risks 
and  taking  out  excessive  insurance  coverage. 

B.  Effective  ERM  has  three  key  benefits:  improved  business  performance,  better 
risk  reporting,  and  stronger  stakeholder  management. 

C.  Managing  downside  risk  and  earnings  volatility  are  optional  ERM  strategies. 

D.  A prudent  ERM  strategy  allows  a firm  to  accept  more  of  the  profitable  risks. 

3.  Which  of  the  following  statements  regarding  the  responsibilities  of  the  chief  risk 
officer  (CRO)  is  least  accurate? 

A.  The  CRO  should  provide  the  vision  for  the  organization’s  risk  management. 

B.  In  addition  to  providing  overall  leadership  for  risk,  the  CRO  should 
communicate  the  organization’s  risk  profile  to  stakeholders. 

C.  Although  the  CRO  is  responsible  for  top-level  risk  management,  he  is  not 
responsible  for  the  analytical  or  systems  capabilities  for  risk  management. 

D.  The  CRO  may  have  a solid  line  reporting  to  the  CEO  or  a dotted  line  reporting 
to  the  CEO  and  the  board. 

4.  Luke  Drake  has  been  recently  appointed  as  the  chief  risk  officer  (CRO)  of  a non- 
profit organization.  Drake  is  looking  to  implement  a comprehensive  enterprise  risk 
management  (ERM)  program  and  had  several  discussions  with  senior  management 
on  this  topic.  During  one  of  these  discussions,  Drake  made  the  following  statements: 

Statement  1 : “Risk  analytics  is  a key  component  of  ERM  and  refers  to  the  integration 
of  risk  management  into  the  revenue  generating  activities  of  the 
organization.  " 

Statement  2:  “While  an  organization  can  hedge  desirable  risks , it  is  unable  to  hedge 
undesirable  risks.  ” 

Is  Drake  correct  regarding  risk  analytics  and  risk  hedging? 


Risk  analvtics 

Risk  hedging 

A. 

Correct 

Incorrect 

B. 

Incorrect 

Incorrect 

C. 

Correct 

Correct 

D. 

Incorrect 

Correct 
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Allen  Richards  sits  on  the  board  of  directors  of  a Canadian  financial  institution. 

Richards  read  the  following  statements  in  a presentation  made  to  the  hoard  of 
directors  by  management  on  the  institutions  enterprise  risk  management  strategies: 

Statement  1:  “To  manage  undesirable  risks,  the  institution  could  use  third-party 
protection , including  insurance  products.  ” 

Statement  2:  “Although  third-party  protection  is  expensive,  this  is  a cost  of  business,  and 
it  is  not  possible  to  reduce  these  costs.  ” 

Richards  believes  both  of  these  statements  are  incorrect.  Richards’  assessment  is 
accurate  with  respect  to: 

A.  Statement  1 only. 

B.  Statement  2 only. 

C.  Both  statements. 

D.  Neither  statement. 
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Concept  Checker  Answers 


1.  A The  basis  of  enterprise  risk  management  (ERM)  is  that  risks  are  managed  within  each  risk 

unit  but  centralized  at  the  senior  management  level. 

The  traditional  approach  to  risk  management  was  the  silo  approach,  under  which  each 
firm  unit  was  responsible  for  managing  its  own  risks,  setting  its  own  policies  and  standards, 
without  coordination  between  the  risk  units.  ERM  is  a superior  approach  because 
management  benefits  from  an  integrated  approach  to  handling  all  risks  (for  example, 
management  can  see  risks  within  the  firm  that  cancel  out  and,  therefore,  do  not  need  to  be 
separately  hedged).  It  is  common,  but  not  necessary,  to  appoint  a chief  risk  officer  to  oversee 
all  risks  under  ERM. 

2.  D A strong  ERM  strategy  allows  a firm  to  accept  more  of  the  profitable  risks  and  reject 

unprofitable  risks. 

Over  hedging  risks  and  taking  out  excessive  insurance  coverage  are  issues  faced  by  companies 
that  do  not  have  an  integrated  ERM  strategy.  In  addition  to  improved  business  performance 
and  better  risk  reporting,  the  third  benefit  of  effective  ERM  is  improved  organizational 
effectiveness.  Managing  downside  risk  and  earnings  volatility  are  strategies  typical  of 
companies  with  a defensive  approach  to  risk  management,  whereas  effective  ERM  focuses  on 
optimizing  performance,  influencing  pricing,  and  allocating  resources  effectively. 

3.  C While  it  is  accurate  that  the  CRO  is  responsible  for  top-level  risk  management,  he  is  also 

responsible  for  the  analytical  or  systems  capabilities  for  risk  management. 

4.  B Both  of  Drakes  statements  are  incorrect.  Line  management,  not  risk  analytics,  refers  to  the 

management  of  activities  that  relate  directly  to  producing  a firm’s  products  and  services.  Line 
management  is  critical  as  it  integrates  business  strategy  into  corporate  risk  policy. 

Through  risk  transfer,  management  can  utilize  a successful  ERM  program  to  transfer  out 
both  undesirable  risk  and  desirable,  concentrated  risks.  Hedging  is  typically  done  with 
derivatives,  insurance,  and  hybrid  products. 

5.  B Richards  was  wrong  in  identifying  Statement  1 as  being  incorrect.  Statement  1 is,  in  fact, 

correct  because  when  managing  undesirable  risks,  an  institution  could  use  third-party 
protection,  including  various  hedges  and  insurance  products. 

Richards  accurately  identified  Statement  2 as  being  incorrect.  While  it  is  true  that  third- 
party  protection  can  be  expensive,  by  incorporating  natural  hedges  in  a risk  portfolio,  the 
institution  could  reduce  its  hedging  and  insurance  costs. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

Implementing  Robust  Risk  Appetite 
Frameworks  to  Strengthen 
Financial  Institutions 


Topic  5 


Exam  Focus 

This  topic  focuses  on  the  risk  appetite  framework  (RAF)  and  how  it  is  best  used,  along  with  a 
risk  appetite  statement  to  manage  risk  within  the  firm.  The  RAF  is  applied  in  many  activities 
and  areas  throughout  the  firm,  and  it  influences  the  firm’s  risk  culture.  For  the  exam,  pay 
close  attention  to  the  challenges  in  implementing  an  RAF  as  well  as  the  best  practices  in 
implementing  and  communicating  an  RAF.  Also,  be  able  to  explain  the  relationship  between 
the  RAF  and  the  firms  strategic  and  capital  planning  processes  and  understand  the  role  of 
stress  testing  within  an  RAF. 


Risk  Appetite  Framework  (RAF) 


LO  5.1:  Relate  the  use  of  risk  appetite  frameworks  (RAF)  to  the  management  of 
risk  in  a firm. 


A defined  risk  appetite  statement  and  a properly  designed  RAF  are  both  required  to 
properly  manage  a firms  risk  and  serve  as  an  important  element  of  corporate  governance. 
They  are  meant  to  be  used  together  to  provide  clear  guidance  in  risk  management.  They 
also  attempt  to  achieve  risk  management  congruence  regarding  the  expectations  of  the 
board  of  directors,  senior  management,  the  firm’s  risk  management  team,  regulatory 
agencies,  and  stakeholders. 

Risk  appetite  is  defined  as  “the  amount  and  type  of  risk  that  a firm  is  able  and  willing  to 
accept  in  pursuit  of  its  business  objectives.”1  The  firm’s  risk  appetite  must  not  exceed  its  risk 
capacity  (i.e.,  the  maximum  amount  of  risk  the  firm  can  take). 

In  developing  a useful  RAF  to  manage  risk,  the  RAF  should  not  be  viewed  as  a set  of 
standalone  rules  or  tasks.  Instead,  it  needs  to  be  viewed  as  an  integral  part  of  a firm’s 
risk  culture  (as  will  be  discussed  in  the  next  LO).  RAFs  require  a substantial  amount  of 
judgment  in  terms  of  development  and  focal  points.  Additionally,  there  are  a wide  variety  of 
risk  cultures  and  business  types  in  existence.  As  a result,  a given  firm  should  not  expect  to 
follow  a “standard”  approach  when  employing  an  RAF  for  risk  management  purposes. 


1 Institute  of  International  Finance.  “Reform  in  the  Financial  Services  Industry:  Strengthening 
Practices  for  a More  Stable  System,”  Institute  of  International  Finance,  www.iif.com/ 
publication/ regulatory- report/iif-releases-report-reforms-financial-services-industry  (accessed 
January  2,  2015). 
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RAFs  may  assist  in  providing  context  for  (measureable)  controls  such  as  risk  policies  and 
risk  limits.  That  context  may  help  increase  the  awareness  and  acceptance  throughout  the 
firm  of  such  controls.  Constant  communication  between  the  hoard,  senior  management, 
risk  management,  and  business  unit  managers  about  risk  appetite  and  risk  profiles  is 
required  to  ensure  that  the  RAF  functions  effectively  throughout  the  firm.  Some  attention 
should  be  given  to  how  the  RAF  may  evolve  over  time  and  the  nature  of  the  risks  taken  in 
the  individual  business  units  to  ensure  they  are  consistent  with  the  overall  risk  appetite. 


Risk  Appetite  and  Risk  Culture 


LO  5.2:  Define  risk  culture  and  assess  the  relationship  between  a firms  risk 
appetite  and  it  risk  culture. 


Risk  culture  is  a system  of  values  and  behaviors  present  in  employees  (including 
management)  throughout  a firm  that  directly  impacts  analysis  of  information  pertaining 
to  risk  and  ultimately  impacts  decisions  about  which  risks  the  firm  will  take.  The  phrase 
“actions  speak  louder  than  words”  is  especially  relevant  in  developing  a robust  risk  culture 
within  the  firm.  Management  must  set  a good  example  for  its  employees  in  actually  doing 
what  they  say  they  will  do. 

There  is  a clear  connection  between  a firm’s  risk  culture  and  its  risk  appetite.  A strong  RAF 
sets  the  stage  for  and  reinforces  a strong  risk  culture.  From  the  very  top  level  (i.e.,  board  and 
senior  management),  the  firm  must  be  decisive  in  terms  of  communicating  the  amount  and 
types  of  risks  it  is  willing  and  able  to  take.  Based  on  that  information,  management  of  the 
various  business  units  are  then  able  to  plan  and  determine  the  appropriate  amount  of  risk  to 
take  in  their  respective  units.  In  reverse,  a strong  risk  culture  makes  it  easier  to  set  an  RAF. 
To  he  effective,  all  levels  of  management  must  constantly  reinforce  the  importance  that  the 
firm  places  on  its  risk  appetite.  That  could  be  achieved  through  training  and  robust  internal 
controls.  A firm  may  facilitate  the  establishment  of  an  effective  RAF  if  it  is  able  to  avoid  an 
overly  strong  connection  between  staff  remuneration  and  the  firm’s  financial  profitability. 

Finally,  there  needs  to  be  the  development  of  relevant  risk  management  performance 
metrics  that  can  objectively  reward  those  who  comply  with  the  set  risk  limits.  At  the  same 
time,  there  should  be  some  qualitative  measures  developed,  although  they  are  admittedly 
more  challenging  to  measure.  Both  quantitative  and  qualitative  measures  are  needed  to 
develop  risk  culture  and  to  ensure  the  effectiveness  of  the  RAF. 

RAF  Implementation  Challenges 


LO  5.3:  Describe  and  evaluate  the  key  challenges  to  the  implementation  of  RAFs. 


Key  challenges  to  implementing  RAFs  include  the  following. 

Properly  transmitting  the  RAF  within  the  firm  together  with  incorporating  the  RAF  into 
making  day-to-day  operating  decisions.  Although  quantitative  risk  limits  appear  to  be 
easily  transmitted  from  the  top  down  throughout  a firm,  other  areas  within  the  RAF  are  less 
concrete  and  difficult  to  translate  into  risk  policies  and  measures  when  making  operating 
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decisions.  Although  top-level  management  may  be  well  versed  in  the  RAF  and  its  impact 
on  the  firm,  it  may  not  be  the  case  with  middle  management,  for  example.  Therefore,  the 
challenge  is  to  train  a broader  range  of  employees  on  the  details  of  the  RAF  and  how  it  is 
beneficial  in  order  to  achieve  employee  acceptance. 

Establishing  a clear  connection  between  RAFs  and  risk  culture.  A firm  that  possesses  a 
strong  risk  culture  may  be  able  to  reduce  some  of  its  reliance  on  strict  compliance  with 
established  limits  and  rules.  However,  a properly  working  IT  system,  robust  internal 
controls,  and  the  existence  of  limits  are  still  necessary  even  with  a strong  risk  culture.  Also, 
risk  appetite  must  be  clearly  tied  to  employee  remuneration.  For  example,  prior  to  any 
incentive  payouts,  consider  whether  the  firm’s  financial  performance  was  accomplished 
within  the  established  limits  and  was  consistent  with  the  risk  culture  and  risk  appetite. 

Communicating  risk  appetite  in  a manner  that  captures  all  relevant  risks.  This  issue 
specifically  refers  to  “qualitative”  risks  such  as  reputation  risk  or  strategic  risk  in  that  they 
are  less  quantifiable  than  “quantitative”  risks  such  as  market  risk  or  credit  risk.  Regardless, 
the  challenge  remains  for  the  RAF  to  fully  incorporate  less  quantifiable  risks.  Specifically,  it 
is  difficult  to  identify  and  properly  mitigate  such  risks.  Solutions  could  include  attempting 
to  quantify  such  risks  through  proxy  measures  as  well  as  using  both  quantitative  and 
qualitative  objectives  when  setting  risk  appetite. 

The  common  view  that  risk  appetite  is  mainly  about  setting  limits.  A significant 
component  of  risk  appetite  involves  limits  and  risk  policies;  however,  there  is  another 
important  side  that  needs  to  be  highlighted  within  the  firm.  Risk  appetite  has  a strong  basis 
in  managing  the  firm’s  overall  risk,  determining  its  business  strategy,  and  maximizing  its 
return.  Again,  education  and  training  of  the  employees  is  necessary  to  ensure  that  they  see 
the  RAF  as  a benefit  and  not  an  impediment  with  regard  to  day-to-day  activities.  However, 
the  essential  point  is  that  the  RAF  should  not  be  too  strict  and  inflexible  that  it  ignores 
changes  in  the  business  and  its  strategy.  At  the  same  time,  it  should  not  be  too  loose  and 
flexible  that  it  is  easily  amended,  lacks  discipline,  or  becomes  impossible  to  understand  and 
manage. 

The  lack  of  connection  between  risk  appetite  and  the  strategic  and  business  planning 
processes.  As  stated  earlier,  an  RAF  may  be  set  at  the  top  level  and,  in  turn,  cascade 
downward  in  the  form  of  specific  limits  within  the  various  business  units.  However,  that 
perception  of  risk  appetite  needs  to  be  broadened  and  should  allow  for  translation  into 
specific  guidance  within  the  business  units.  In  other  words,  the  key  challenge  is  to  integrate 
risk  appetite  throughout  the  firm  so  as  to  allow  for  the  RAF  to  directly  impact  the  firm’s 
business  and  strategic  decisions  instead  of  being  relegated  a minor  role  in  the  overall  risk 
management  process.  The  aim  is  to  make  the  process  as  collaborative  between  as  many 
groups  as  possible. 

The  role  of  stress  testing  in  the  RAF.  Although  there  is  little  doubt  that  stress  testing 
should  be  included  in  the  RAF,  there  is  a great  deal  of  uncertainty  as  to  how  exactly  it 
should  be  included.  The  use  of  stress  testing  could  range  from  being  a mere  “sanity  check” 
of  the  risk  appetite  to  being  the  core  component  of  it.  The  challenge  lies  in  interpreting  the 
results  of  the  stress  tests  and  determining  how  much  of  the  RAF  should  account  for  extreme 
but  plausible  situations. 
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Aggregation  of  risks  at  the  group  level  and  then  down  to  the  individual  business  units. 
Although  in  theory  the  process  should  work  easily,  in  practice,  there  is  still  no  uniform 
method  to  achieve  it.  The  challenge  lies  in  developing  one  standard  approach  to  translate 
high-level  (and  sometimes  qualitative)  risk  appetite  statements  into  more  objective  measures 
in  the  form  of  risk  limits  and  tolerances  for  each  of  the  business  units.  There  needs  to  be 
consistency  in  terms  of  how  the  individual  business  units  set  their  risk  tolerances  and  the 
risk  appetite  of  the  overall  firm. 


RAF  Best  Practices 


LO  5-4:  Describe  current  best  practices  for  the  implementation  and 
communication  of  RAFs. 


Best  practices  for  RAF  implementation  and  communication  include  the  following. 

Communication  with  employees.  At  the  very  top  level,  the  CEO  must  be  a visible  and 
active  participant  in  promoting  the  RAF  throughout  the  firm.  Prior  to  that,  the  board  of 
directors  and  management  need  to  fully  agree  on  the  most  useful  and  detailed  definition  of 
risk  appetite.  The  communication  must  be  done  in  clear  language  that  is  easy  to  understand 
and  devoid  of  jargon  that  may  impair  clarity.  Additional  information  on  the  firm’s  risk 
capacity  versus  the  current  amount  of  risk  undertaken  should  be  provided  to  assist 
employees  with  understanding  the  RAF. 

Limits.  Limits  are  crucial  to  ensure  the  proper  implementation  of  the  RAF  throughout  the 
firm.  An  effective  RAF  must  go  beyond  the  mere  setting  of  limits.  For  example,  the  best 
practice  would  be  to  educate  the  employees  who  must  comply  with  those  limits.  Those 
employees  should  understand  the  background  and  reasons  for  the  limits  together  with  their 
impact  on  the  firm’s  revenue/profits,  client  service,  and  total  risk.  The  ultimate  goal  is  to 
achieve  an  open  dialogue  about  the  range  of  acceptable  risks  and  how  to  best  allocate  the 
scarce  resources  available  to  the  firm. 

Responsibility  for  risk.  Business  unit  managers  should  clearly  be  responsible  for  managing 
risk  within  their  respective  units.  There  should  be  an  overt  inclusion  of  risk  within  the 
planning  process  for  each  unit.  At  the  same  time,  controls  and  checks  are  needed  to  ensure 
that  those  risks  are  consistent  with  the  firm’s  aggregate  risk  appetite.  Furthermore,  business 
unit  managers  should  educate  their  staff  on  the  rationale  behind  having  risk  appetite 
limits  within  the  unit.  An  effective  technique  to  promote  employee  acceptance  would  be 
to  provide  specific  examples  of  business  opportunities  and  routine  transactions  and  how 
they  fit  within  the  risk  appetite.  All  of  those  activities  help  to  thoroughly  incorporate 
risk  appetite  into  the  business  units  and  to  ensure  consistency  between  business  and  risk 
decisions  and  the  firm’s  aggregate  risk  appetite. 

Transaction  approval.  Individuals  who  are  entrusted  with  approving  transactions  should 
try  to  illustrate  the  connection  between  risk  appetite  and  specific  policies  as  well  as  the 
connection  between  risk  appetite  and  approved  transactions.  This  would  help  with 
communicating  the  importance  of  the  RAF  to  staff  at  all  levels  throughout  the  firm.  It  may 
even  promote  further  discussion  of  the  RAF  and  make  the  RAF  more  dynamic  to  allow  for 
modifications  to  exploit  business  opportunities  or  modifications  to  account  for  changes  in 
risk/reward  relationships. 
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RAF  and  the  Firm  s Planning  Processes 


LO  5.5:  Explain  the  relationship  between  the  RAF  and  the  strategic  and  capital 
planning  processes. 


There  is  a crucial  relationship  between  the  RAF  and  the  strategic  and  capital  planning 
processes  that  needs  to  be  structured  and  constantly  reinforced  with  open  internal 
communication. 

The  structured  process  begins  with  either  a complete  risk  appetite  statement  from  the  board 
or  some  fundamental  risk  parameters  for  the  individual  business  units  to  consider.  In  some 
cases,  additional  financial  information  such  as  liquidity,  leverage,  and  capital  objectives 
might  be  provided.  The  idea  is  to  try  to  “transform”  as  many  of  the  qualitative  objectives 
into  measurable  objectives  as  possible.  Such  guidance  is  intended  for  the  business  unit 
managers  to  determine  their  strategic  and  capital  plans  that  are  more  aligned  with  the  firm 
overall. 

The  “output”  from  each  of  the  business  units  is  either  a divisional  risk  appetite  statement 
or  the  communication  of  a divisional  “risk  posture”  that  states  whether  risk  in  the  business 
unit  is  expected  to  increase,  decrease,  or  remain  constant.  Then  there  is  a risk  aggregation 
of  all  the  business  units  in  terms  of  the  business  and  budget  plans  to  be  compared  with  the 
firms  overall  risk  appetite.  Finally,  relevant  changes  are  made  to  the  business  unit  plans  or 
even  the  firms  overall  risk  appetite.  If  the  overall  risk  appetite  is  changed,  there  must  be 
justification  to  do  so  and  it  must  be  done  in  a transparent  manner.  This  would  ensure  the 
continued  congruency  between  business  unit  plans  and  the  overall  risk  appetite. 

The  same  general  steps  apply  whether  the  firm’s  planning  process  is  “top  down”  (from  the 
board/senior  management)  or  “bottom  up”  (from  the  business  unit  managers).  Ultimately, 
the  goal  is  to  have  congruency  between  the  firm’s  divisional  business  plans  and  the 
firm’s  overall  risk  appetite  statement.  A key  objective  of  the  process  is  to  have  all  parties 
understand  the  relationships  and  the  tradeoffs  between  the  major  risk  appetite  limits  and 
the  revenue  opportunities  of  the  business. 

There  are  several  methods  to  assist  with  strengthening  the  relationship  between  the 
RAF  and  the  respective  business  units.  First,  a robust  working  relationship  between  the 
risk  management,  finance,  and  strategy  teams  is  needed,  although  it  is  noted  that  such 
integration  (especially  due  to  the  inclusion  of  the  risk  management  team)  could  make 
budgeting  and  planning  even  more  difficult.  However,  the  cost  of  the  increased  difficulty 
would  be  balanced  by  the  benefit  of  the  greater  congruency  between  business  plans  and 
risk  appetite.  In  addition,  over  time,  the  learning  curve  effect  should  also  reduce  the  initial 
increased  difficulty. 

Second,  discussing  risk  appetite  issues  in  context  of  risk  posture  at  all  levels  within  the 
firm  facilitates  the  input  and  involvement  of  many  more  participants.  That  is  because  risk 
posture  is  generally  easy  to  understand  and  it  complements  the  other  quantitative  measures. 
The  discussions  can  then  move  toward  the  risk  and  return  tradeoffs. 

Third,  periodic  meetings  (e.g.,  quarterly)  between  risk  management,  finance,  and  the 
business  unit  managers  to  discuss  relevant  operational  and  financial  matters  (e.g.,  changes  in 
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risk  profile  or  risk/ return  tradeoffs,  business  activities,  risk  concentrations)  and  their  impact 
on  risk  appetite  could  increase  the  efficiency  of  the  annual  planning  process.  The  matters 
discussed  could  be  integrated  into  planning  for  the  next  fiscal  period. 

Finally,  there  could  be  the  simple  requirement  that  all  business  unit  managers  demonstrate 
how  the  risk  appetite  has  been  integrated  in  making  strategic  decisions  at  the  business  unit 
level.  Also,  they  could  demonstrate  how  the  business  unit  strategy  ties  back  to  the  firm’s 
overall  risk  appetite. 


LO  5.6:  Assess  the  role  of  stress  testing  with  an  RAF  as  well  as  challenges  in  firm- 
wide risk  aggregation. 


Stress  Testing 

In  setting  the  firm’s  risk  appetite,  the  board  of  directors  and  management  may  deliberately 
reduce  the  amount  of  risk  otherwise  taken  but,  at  the  same  time,  take  into  account  the  risk 
associated  with  severe  stress  scenarios.  They  must  understand  probability  distributions  of 
the  possible  outcomes  for  a number  of  extreme  but  plausible  scenarios.  In  doing  so,  these 
measures  allow  them  to  compute  the  loss  amounts  that  would  be  acceptable  in  each  case. 
Those  computations  (i.e.,  stress  tests)  are  technically  difficult  and  require  lots  of  judgment 
and  assumptions  with  regard  to  the  computation  inputs. 

Stress  tests  could  incorporate  a wide  variety  of  macroeconomic  scenarios  (e.g.,  recession 
and  expansion)  and  changes  in  market  variables  (e.g.,  interest  rates,  foreign  exchange  rates, 
inflation  rates)  in  order  to  determine  the  magnitude  of  possible  credit,  market,  and  revenue 
losses  in  each  severe  stress  scenario.  There  is  much  subjectivity  and  judgment  required  in 
deciding  how  severe  the  changes  should  be,  although  there  should  also  be  some  objective 
criteria  used.  The  changes  must  be  sufficiently  severe  but  not  excessive  to  the  point  that  they 
become  implausible.  Furthermore,  assessing  the  results  of  the  stress  tests  requires  additional 
judgment,  and  there  must  be  a process  to  determine  whether  to  implement  risk  appetite 
changes  in  view  of  stress  test  results  or  simply  make  no  changes  because  they  are  considered 
implausible. 

From  an  RAF  perspective,  one  challenge  in  assessing  risk  appetite  involves  the  weighting 
between  (1)  losses  that  would  occur  over  a certain  period  in  likely  and  less  severe  economic 
scenarios  versus  and  (2)  losses  that  would  occur  over  a certain  period  in  unlikely  and  more 
severe  economic  scenarios.  From  a quantitative  perspective,  judgment  is  required  to  assess 
whether  the  computed  losses  are  tolerable  within  the  RAF. 

There  is  a known  challenge  of  accounting  for  the  impact  of  low  probability  (but  severe) 
events  in  terms  of  modifying  business  plans  and  strategies  accordingly.  Firms  taking  a more 
conservative  approach  with  their  RAF  may  opt  to  give  more  weight  to  likely  losses  that 
would  occur  in  those  low  probability  scenarios. 
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Firm -wide  Risk  Aggregation  Challenges 

There  are  two  ways  of  viewing  the  challenges  associated  with  firm-wide  risk  aggregation. 
First,  the  separate  business  units  will  set  their  risk  appetite  parameters,  but  there  is  no 
set  method  for  the  firm  to  use  in  determining  whether  the  sum  of  those  parameters  is 
acceptable  for  the  firms  total  risk  appetite.  Second,  when  assuming  that  the  quantitative 
measures  of  risk  are  reliable  and  accurate,  there  is  still  the  problem  with  properly  measuring 
the  less  quantifiable  risks.  This  measurement  uncertainty  introduces  a great  deal  of  doubt 
that  the  risk  appetite  levels  set  by  the  business  units  in  aggregate  will  be  congruent  with  the 
firms  overall  risk  appetite. 

In  the  context  of  risk  aggregation,  firms  often  use  regulatory  and  economic  capital  measures 
(e.g.,  VaR)  to  simplify  the  task.  However,  such  measures  do  have  drawbacks,  including 
their  nonintuitive  nature,  inability  to  account  for  nonquantifiable  risks,  inability  to  capture 
the  liquidity  components  of  risk,  difficulty  in  accounting  for  risk  concentrations  and 
diversification  within  and  between  risk  types,  and  difficulty  in  tying  capital  measures  to 
specific  macroeconomic  stress  scenarios.  As  a result  of  the  drawbacks  of  capital  measures 
in  computing  a reliable  estimate  of  aggregate  risks,  some  firms  are  supplementing  capital 
measures  with  stress  testing  in  the  risk  aggregation  process. 

Some  best  practices  to  consider  with  risk  aggregation  include  taking  into  account  all 
risks  and  not  just  the  quantifiable  ones,  analyzing  the  variety,  nature,  and  stability  of 
earnings  in  all  of  the  business  units  comprising  the  firm,  determining  areas  where  risk  is 
too  concentrated,  not  overestimating  any  possible  risk  diversification  effects,  determining 
aggregate  risk  posture,  and  aggregating  risk  appetite  in  a normal  scenario  as  well  as  a stressed 
scenario. 
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Key  Concepts 


LO  5.1 

A defined  risk  appetite  statement  and  a properly  designed  risk  appetite  framework  (RAF) 
are  both  required  to  properly  manage  a firm’s  risk  and  serve  as  an  important  element  of 
corporate  governance.  They  are  meant  to  be  used  together  to  provide  clear  guidance  in 
risk  management  as  well  as  attempt  to  achieve  congruence  in  terms  of  the  expectations  of 
the  board,  senior  management,  the  firm’s  risk  management  team,  regulatory  agencies,  and 
stakeholders  with  regard  to  risk  management. 


LO  5.2 

Risk  culture  is  a system  of  values  and  behaviors  present  in  employees  (including 
management)  throughout  a firm  that  directly  impacts  analysis  of  information  pertaining  to 
risk  and  ultimately  impacts  decisions  about  which  risks  the  firm  will  take. 

There  is  a clear  connection  between  a firms  risk  culture  and  its  risk  appetite;  a strong  RAF 
sets  the  stage  for  and  reinforces  a strong  risk  culture.  In  reverse,  a strong  risk  culture  makes 
it  easier  to  set  an  RAF. 


LO  5.3 

Key  challenges  to  implementing  RAFs  include; 

• Properly  transmitting  the  RAF  within  the  firm  together  with  incorporating  the  RAF  into 
making  day-to-day  operating  decisions. 

• Establishing  a clear  connection  between  RAFs  and  risk  culture. 

• Communicating  risk  appetite  in  a manner  that  captures  all  relevant  risks. 

• The  common  view  that  risk  appetite  is  mainly  about  setting  limits. 

• The  lack  of  connection  between  risk  appetite  and  the  strategic  and  business  planning 
processes. 

• The  role  of  stress  testing  in  the  RAF. 

• Aggregation  of  risks  at  the  group  level  and  then  down  to  the  individual  business  units. 


LO  5.4 

Best  practices  in  terms  of  implementing  and  communicating  RAFs  include: 

• Communication  to  staff  is  done  in  clear  language  that  is  easy  to  understand  and  devoid 
of  jargon. 

• Educating  employees  who  must  comply  with  risk  limits.  Those  employees  should 
understand  the  background  and  reasons  for  the  limits. 

• Business  unit  managers  should  clearly  be  responsible  for  managing  risk  within  their 
respective  units.  There  should  be  an  overt  inclusion  of  risk  within  the  planning  process 
for  each  unit. 

• Individuals  who  are  entrusted  with  approving  transactions  should  try  to  illustrate  the 
connection  between  risk  appetite  and  specific  policies  and  between  risk  appetite  and 
approved  transactions. 


Page  54 


©2015  Kaplan,  Inc. 


LO  5.5 


Topic  5 

Cross  Reference  to  GARP  Assigned  Reading  - Institute  of  International  Finance 


There  is  a crucial  relationship  between  the  RAF  and  the  strategic  and  capital  planning 
processes  that  needs  to  be  structured  and  constantly  reinforced  with  open  internal 
communication. 

The  process  involves  the  following  general  steps: 

Step  1:  Establish  either  a complete  risk  appetite  statement  from  the  board  or  some 
fundamental  risk  parameters  for  the  individual  business  units  to  consider. 

Step  2:  The  “output”  from  the  business  unit  is  either  a divisional  risk  appetite  statement  or 
the  communication  of  a “risk  posture.” 

Step  3:  Risk  aggregation  of  all  the  business  units  in  terms  of  the  business  and  budget  plans 
to  be  compared  with  the  firm’s  overall  risk  appetite. 

Step  4:  Relevant  changes  are  made  to  the  business  unit  plans  or  even  the  firm’s  overall  risk 
appetite. 


LO  5.6 

The  board  and  management  must  understand  probability  distributions  of  the  possible 
outcomes  for  a number  of  extreme  but  plausible  scenarios  (done  through  stress  testing). 

In  doing  so,  stress  tests  allow  them  to  compute  the  loss  amounts  that  would  be  acceptable 
in  each  case.  Stress  tests  could  incorporate  a wide  variety  of  macroeconomic  scenarios  and 
changes  in  market  variables  in  order  to  determine  the  magnitude  of  possible  losses  in  each 
severe  stress  scenario. 

Firm-wide  risk  aggregation  is  problematic  because  the  separate  business  units  will  set  their 
risk  appetite  parameters,  but  there  is  no  set  method  for  the  firm  to  use  in  determining 
whether  the  sum  of  those  parameters  is  acceptable  for  the  firm’s  total  risk  appetite.  In  other 
words,  when  assuming  that  the  quantitative  measures  of  risk  are  reliable  and  accurate,  there 
is  still  the  problem  with  properly  measuring  the  less  quantifiable  risks.  This  measurement 
uncertainty  introduces  a great  deal  of  doubt  that  the  risk  appetite  levels  set  by  the  business 
units  in  aggregate  will  be  congruent  with  the  firm’s  overall  risk  appetite. 
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Concept  Checkers 


1 . Lisa  Tahara,  FRM,  is  a risk  specialist  on  the  board  of  directors  of  a financial 
institution.  Her  current  task  involves  the  implementation  of  a new  risk  appetite 
framework  (RAF)  for  the  firm.  Which  of  the  following  concerns  is  Lisa  least  likely  to 
have? 

A.  The  mitigation  of  nonquantifiable  risks. 

B.  The  relationship  between  risk  appetite  and  employee  remuneration. 

C.  The  educating  and  training  of  top  management  on  the  details  of  the  RAF. 

D.  The  development  of  an  approach  to  translate  risk  appetite  statements  into  risk 
limits  and  tolerances. 

2.  You  are  a member  of  the  senior  management  team  at  a bank  where  you  have 
spent  a significant  amount  of  time  assisting  with  the  development  of  a risk 
appetite  framework  (RAF).  With  regard  to  the  RAF,  which  of  the  following 
recommendations  would  you  most  likely  be  willing  to  make? 

I.  In  communicating  the  RAF  to  the  banks  employees,  information  on  the  banks 
risk  capacity  versus  current  amount  of  risk  undertaken  should  be  provided. 

II.  An  effective  RAF  should  focus  primarily  on  setting  appropriate  risk  limits 
within  the  bank  and  its  respective  business  units. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

3.  Which  of  the  following  statements  regarding  stress  testing  and  firm-wide  risk 
aggregation  is  most  accurate? 

A.  One  potential  problem  with  the  risk  aggregation  process  is  the  underestimation 
of  the  diversification  effect. 

B.  In  the  context  of  risk  aggregation,  stress  tests  are  considered  a more  reliable 
alternative  than  regulatory  and  economic  capital  measures. 

C.  The  process  of  stress  testing  can  be  performed  in  a relatively  objective  manner 
given  that  many  common  risks  are  reasonably  quantifiable. 

D.  Using  the  results  of  stress  testing,  those  scenarios  that  will  result  in  minimal 
losses  with  a very  low  likelihood  of  occurrence  may  be  ignored  when  considering 
any  adjustments  to  risk  appetite. 

4.  Which  of  the  following  statements  regarding  the  structured  process  involved  with 
risk  appetite  frameworks  (RAF)  and  strategic  and  capital  planning  is  most  accurate? 

A.  The  process  concludes  with  making  any  needed  changes  to  the  business  unit 
plans. 

B.  The  process  aims  to  transform  as  many  of  the  qualitative  objectives  into 
measurable  objectives  as  possible. 

C.  The  process  begins  with  either  a divisional  risk  appetite  statement  or  the 
communication  of  a risk  posture  from  each  of  the  divisions  within  the  firm. 

D.  The  process  will  differ  depending  on  whether  the  firm’s  planning  process  is  top 
down  from  the  board/senior  management  or  bottom  up  from  the  business  unit 
managers. 
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Which  of  the  following  statements  regarding  the  relationship  between  the  firms 

risk  appetite  framework  (RAF)  and  its  strategic  and  capital  planning  processes  is 

accurate? 

I.  The  initial  impact  of  including  the  risk  management  team  in  the  budgeting 
and  planning  process  for  the  individual  business  units  would  be  to  bring  in 
expertise  and  reduce  the  difficulty  of  the  process. 

II.  Annual  meetings  between  risk  management,  finance,  and  the  business  unit 
managers  to  discuss  relevant  operational  and  financial  matters  and  their  impact 
on  risk  appetite  could  increase  the  efficiency  of  the  annual  planning  process. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 
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Concept  Checker  Answers 


1 . C Top-level  management  is  most  likely  to  be  very  well  versed  in  the  RAF  and  its  impact  on 

the  firm.  However,  this  may  not  be  the  case  with  middle  management.  Therefore,  Lisa 
would  more  likely  be  concerned  about  training  a broader  range  of  employees  below  top-level 
management  on  the  details  of  the  RAF. 

Choice  A is  not  correct  because  Lisa  would  be  concerned  with  how  the  RAF  would  fully 
incorporate  the  nonquantifiable  risks  especially  because  it  is  difficult  to  identify  and  properly 
mitigate  such  risks.  Choice  B is  not  correct  because  to  ensure  a clear  connection  between  the 
RAF  and  risk  culture,  risk  appetite  must  be  clearly  tied  to  employee  remuneration.  Choice  D 
is  not  correct  because  in  the  context  of  aggregating  risks,  the  challenge  remains  in  developing 
one  standard  approach  to  translate  high-level  risk  appetite  statements  into  more  objective 
measures  in  the  form  of  risk  limits  and  tolerances  for  each  of  the  business  units. 

2.  A In  terms  of  communicating  the  RAF  with  the  bank’s  employees,  additional  information  on 

the  firm’s  risk  capacity  versus  current  amount  of  risk  undertaken  should  be  provided  to  assist 
employees  with  understanding  the  RAF. 

An  effective  RAF  must  go  beyond  the  mere  setting  of  risk  limits.  The  best  practice  would 
be  to  educate  the  employees  who  must  comply  with  those  limits.  Those  employees  should 
understand  the  background  and  reasons  for  the  limits  together  with  their  impact  on  the 
firm’s  revenue/profits,  client  service,  and  total  risk. 

3.  D In  a scenario  with  minimal  losses  and  a very  low  likelihood  of  occurrence,  the  likely  course 

of  action  would  be  to  ignore  the  scenario  when  considering  any  adjustments  to  risk  appetite. 
In  contrast,  significant  losses  and  a very  low  likelihood  of  occurrence  are  more  problematic 
and  subjective  but  certainly  cannot  be  ignored.  Minimal  losses  with  a high  likelihood  of 
occurrence  would  not  be  ignored  either. 

Choice  A is  not  correct  because  the  potential  problem  lies  with  overestimating  the 
diversification  effect,  not  underestimating  it.  Choice  B is  not  correct  because  with  the  risk 
aggregation  process,  firms  often  use  regulatory  and  economic  capital  measures  to  simplify 
the  task.  However,  such  measures  do  have  drawbacks  in  computing  a reliable  estimate  of 
aggregate  risks.  As  a result  of  those  drawbacks,  it  may  be  necessary  to  supplement  (and  not 
substitute)  those  measures  with  stress  testing.  Choice  C is  not  correct  because  stress  tests 
could  incorporate  a wide  variety  of  macroeconomic  scenarios  and  changes  in  market  variables 
in  order  to  determine  the  magnitude  of  losses  in  each  severe  stress  scenario.  There  is  also 
much  subjectivity  and  judgment  required  (and  little  objectivity)  in  deciding  how  severe  the 
changes  should  be. 

4.  B The  process  may  involve  providing  additional  financial  information  such  as  liquidity, 

leverage,  and  capital  objectives;  the  idea  is  to  try  to  “transform”  as  many  of  the  qualitative 
objectives  into  measurable  objectives  as  possible.  Such  guidance  is  intended  for  the  business 
unit  managers  to  determine  their  strategic  and  capital  plans  that  are  more  aligned  with  the 
firm  overall. 

Choice  A is  not  correct  because  the  final  step  of  the  process  involves  not  only  changes  made 
to  the  business  unit  plans  but  also  possibly  changes  to  the  firm’s  overall  risk  appetite.  If  the 
overall  risk  appetite  is  changed,  there  must  be  justification  to  do  so  and  it  must  be  done  in  a 
transparent  manner.  Choice  C is  not  correct  because  the  structured  process  begins  with  either 
a complete  risk  appetite  statement  from  the  board  or  some  fundamental  risk  parameters  for  the 
individual  business  units  to  consider.  Choice  D is  not  correct  because  the  same  general  steps  of 
the  process  apply  regardless  of  whether  the  firm’s  planning  process  is  top  down  or  bottom  up. 
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5-  D Although  a robust  working  relationship  between  the  risk  management,  finance,  and  strategy 
teams  is  needed,  the  inclusion  of  the  risk  management  team  would  likely  make  the  budgeting 
and  planning  process  more  difficult  initially. 

In  order  to  increase  the  efficiency  of  the  annual  planning  process,  periodic  meetings  between 
risk  management,  finance,  and  the  business  unit  managers  should  occur  to  discuss  relevant 
operational  and  financial  matters  and  their  impact  on  risk  appetite.  However,  such  meetings 
should  occur  more  frequently  than  annually  (e.g.,  quarterly). 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

Financial  Disasters 


Topic  6 

Exam  Focus 

These  case  studies  illustrate  a number  of  financial  and  operational  risk  management  failures. 
Specifically,  we  will  examine  cases  involving  misleading  reporting,  large  unexpected  market 
movements,  and  inappropriate  customer  conduct.  Pay  close  attention  to  the  causes  of  these 
financial  disasters  and  how  they  could  have  been  prevented.  You  should  be  prepared  to 
handle  questions  on  these  recurring  themes. 


LO  6. 1 : Analyze  the  key  factors  that  led  to  and  derive  the  lessons  learned  from  the 
following  risk  management  case  studies: 

• Chase  Manhattan  and  their  involvement  with  Drysdale  Securities 

• Kidder  Peabody 

• Barings 

• Allied  Irish  Bank 

• Union  Bank  of  Switzerland  (UBS) 

• Societe  Generale 

• Long  Term  Capital  Management  (LTCM) 

• Metallgesellschaft 

• Bankers  Trust 

• JPMorgan,  Citigroup,  and  Enron 
Misleading  Reporting  Cases 

The  following  cases  demonstrate  situations  where  investors,  firms,  and  lenders  were  misled 
about  the  nature  and  size  of  investment  positions.  In  all  cases,  the  motivation  to  mislead 
was  driven  by  the  desire  to  make  a large  profit.  The  large  potential  gain  was  sought  by 
taking  large  risky  positions,  thereby  creating  a severe  moral  hazard  issue.  The  importance  of 
independent  risk  management  oversight  is  apparent  after  reading  these  cases. 

Chase  Manhattan  Bank  and  Drysdale  Securities 

In  1976,  Drysdale  Government  Securities  was  able  to  borrow  $300  million  in  unsecured 
funds  from  Chase  Manhattan.  The  borrowed  funds  far  exceeded  Drysdales  capital  of  $20 
million  and  consequently  any  amount  it  would  have  normally  been  approved  to  borrow. 
The  company  used  the  borrowed  funds  to  take  bond  positions,  which  eventually  declined 
in  value.  Given  the  loss  in  market  value,  Drysdale  was  unable  to  repay  the  borrowed  funds 
and  was  forced  into  bankruptcy.  Almost  all  of  the  losses  had  to  be  absorbed  by  Chase 
Manhattan  since  it  brokered  most  of  Drysdales  borrowings. 

Drysdale  obtained  these  funds  by  exploiting  a flaw  in  the  markets  system  for  computing 
the  value  of  collateral  of  United  States  government  bonds.  In  an  effort  to  save  time,  this 
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collateral  was  often  valued  without  the  consideration  of  accrued  interest.  This  imprecise 
calculation  method  allowed  Drysdale  to  take  advantage  of  the  difference  between  the  cash 
value  borrowed  securities  could  be  sold  for,  which  accounted  for  accrued  interest,  and  the 
amount  of  cash  collateral  required  to  be  posted  against  the  borrowed  securities,  which  did 
not  account  for  accrued  interest. 

Clearly,  misleading  reporting  was  used  by  Drysdale  in  order  to  obtain  the  borrowed 
funds.  However,  Chase  Manhattan  was  partially  to  blame  for  assuming  that  it  was  simply 
the  middleman  in  the  transactions  and  the  positions  taken  had  a low  level  of  risk.  The 
inexperienced  managers  at  Chase  failed  to  realize  that  the  contract  wording  with  Drysdale 
indicated  that  Chase  would  be  held  responsible  for  any  payments  due.  This  financial 
disaster  convinced  the  securities  industry  to  develop  more  accurate  methods  for  computing 
collateral  when  borrowing  bonds.  The  situation  also  led  Chase  and  other  firms  to  seek  the 
approval  of  a risk  control  function  when  issuing  new  funds. 

Kidder  Peabody 

The  head  of  the  government  bond  trading  desk  at  Kidder  Peabody,  Joseph  Jett,  misreported 
a series  of  trades  between  1992  and  1994,  which  allowed  him  to  report  substantial  artificial 
profits.  After  these  errors  were  detected,  $350  million  in  falsely  reported  gains  had  to  be 
reversed.  The  series  of  events  did  not  result  in  actual  losses  for  the  firm  since  the  profits 
were  fake;  however,  the  trades  triggered  a loss  of  confidence  in  the  management  of  Kidder 
Peabody,  which  was  owned  by  General  Electric  (GE).  GE  ended  up  selling  Kidder  to  Paine 
Webber,  which  ultimately  dismantled  the  troubled  company. 

Jett  was  able  to  report  false  profits  since  the  computer  system  used  to  report  government 
bond  trading  activity  did  not  account  for  a forward  contract’s  present  value.  This  enabled 
Jett  to  earn  an  instant  profit  when  purchasing  a bond  for  cash  and  delivering  the  forward 
contract.  The  system  failed  to  realize  that  this  profit  would  disappear  once  financing  costs 
for  the  cash  bond  were  taken  into  account. 

Increasing  the  size  of  the  forward  contracts,  as  well  as  the  length  of  the  delivery  period, 
enabled  Jett  to  further  exploit  the  computer’s  accounting  error.  Eventually,  Jetts  profits 
came  under  fire  after  Kidder  realized  that  no  individual  trading  strategy  could  produce  the 
substantial  profits  that  were  being  reported.  This  misleading  reporting  case  demonstrates  the 
importance  of  investigating  large  profits  from  unknown  trading  strategies. 

Barings 

Nick  Leeson,  a British  Barings  junior  trader  in  Singapore,  took  speculative  derivative 
positions  in  an  effort  to  recoup  prior  trading  losses  that  he  was  able  to  hide  fraudulently. 

The  losses  went  undetected  due  to  inadequate  control  systems. 

In  1994,  Leeson  lost  $296  million  through  his  trading  activities,  but  reported  a profit 
of  $46  million  to  management.  His  trading  supposedly  involved  two  main  strategies — 
selling  straddles  on  the  Nikkei  225  and  arbitraging  price  differences  on  Nikkei  225  futures 
contracts  that  were  trading  on  different  exchanges.  A short  straddle  strategy  involves  selling 
calls  and  puts.  It  is  profitable  when  the  underlying  index  remains  relatively  unchanged  over 
the  life  of  the  straddle,  in  which  case  the  calls  and  puts  expire  worthless,  leaving  the  option 
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writer  with  the  option  premiums.  The  Nikkei  225  futures  arbitrage  involves  taking  a long 
futures  position  on  one  exchange  where  the  price  is  relatively  low  and  hedging  with  an 
offsetting  short  position  on  another  exchange  where  the  price  is  relatively  higher. 

Leeson  had  previously  incurred  huge  trading  losses  that  would  have  cost  him  his  job  if  they 
were  revealed.  In  an  effort  to  recover  those  losses,  he  abandoned  the  hedged  posture  in  the 
long-short  futures  arbitrage  strategy  and  initiated  a speculative  long-long  futures  position  on 
both  exchanges  in  hope  of  profiting  from  an  increase  in  the  Nikkei  225.  This  move  exposed 
the  firm  to  enormous  market  risk  and  event  risk,  which  stems  from  unexpected  major 
events  that,  while  not  directly  related  to  markets,  can  affect  markets. 

On  January  17,  1995,  an  earthquake  hit  Japan.  The  Nikkei  plunged,  creating  huge  losses 
on  both  the  short  straddle  and  the  double-long  futures  position.  The  resulting  margin 
calls  were  satisfied  for  a time  because  in  1994,  Leeson  had  requested  and  received  without 
question  $354  million  from  the  London  office  because  they  believed  his  strategy  was 
riskless.  This  lack  of  oversight  contributed  to  Barings’  failure  as  the  Nikkei  continued  to 
drop.  Between  1993  and  1995,  Leeson’s  actions  resulted  in  losses  of  approximately  $1.25 
billion  and  forced  Barings  into  bankruptcy. 

In  addition  to  being  Barings’  floor  manager  on  the  Singapore  International  Monetary 
Exchange  (SIMEX)  trading  floor,  Leeson  was  in  charge  of  settlement  operations.  This 
position  allowed  him  to  influence  back-office  employees  to  hide  his  trading  losses  from  the 
London  office.  He  was  able  to  hide  speculative  positions  by  reporting  these  positions  for 
fictitious  customers.  He  used  an  old  error  account  to  book  losing  trades  for  these  fictitious 
customers  and  used  his  back-office  influence  to  prevent  that  trading  activity  from  being 
reported  to  the  main  office  in  London. 

To  book  profits  that  would  he  reported  to  London,  Leeson  initiated  cross  trades  on  the 
SIMEX  in  which  the  same  firm  buys  and  sells  a security  at  the  current  market  price.  Again 
using  his  back-office  influence,  he  directed  settlement  employees  to  modify  the  execution 
price,  making  one  side  of  the  trade  profitable  and  the  other  unprofitable.  The  profitable 
trade  was  booked  to  the  standard  trading  accounts,  which  were  reported  to  management, 
while  the  unprofitable  trade  was  booked  to  the  old  error  account  that  escaped  reporting 
to  senior  management.  By  incorrectly  booking  these  losses,  Leeson  was  able  to  report 
substantial  profits  in  1994,  which  allowed  him  to  earn  a $720,000  bonus. 

Leeson  was  able  to  illegally  book  fraudulent  trades  because  there  was  little  management 
oversight  of  the  settlement  process . Leeson  was  responsible  for  reporting  to  multiple  managers 
in  a convoluted  organizational  structure.  This  situation  created  ambiguity  concerning 
who  was  responsible  for  performing  specific  oversight  functions.  In  addition,  political 
power  struggles  and  senior  management’s  lack  of  understanding  about  Leeson’s  role  eroded 
oversight  and  allowed  trading  losses  to  be  hidden. 

Officially,  Leeson  was  subject  to  risk  controls  that  limited  the  amount  of  speculative  trades 
he  was  allowed  to  make.  In  practice,  however,  he  ignored  and  vastly  exceeded  those  limits. 
These  violations  went  undetected  because  Barings  lacked  risk  management  oversight  that 
would  have  monitored  positions,  strategies,  and  risk.  This  oversight  was  so  poor  that  the 
London  office  transferred  $354  million  to  meet  margin  calls  without  questioning  Leeson. 

If  management  had  a better  understanding  of  Leeson’s  trading  strategies,  they  would  have 
recognized  that  his  reported  profits  were  disproportionate  to  the  purported  riskless  trading. 
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In  sum,  weak  management  at  Barings  failed  to  establish  information,  reporting,  and  control 
systems.  If  trading  and  settlement  responsibilities  rested  with  different  people,  coordinating 
the  trading  and  settlement  schemes  required  to  hide  trading  losses  would  be  much  more 
difficult.  It  would  have  created  a system  of  checks  and  balances  that  might  have  prevented 
Leeson  from  taking  wildly  speculative  positions. 

Allied  Irish  Bank 

Between  1997  and  2002,  a currency  trader  for  Allied  Irish  Bank  (AIB),  John  Rusnak,  hid 
$691  million  in  losses  from  management.  Rusnak  used  a number  of  deceptive  means  to 
hide  these  losses  including  bullying  back-office  workers  into  not  following-up  on  trade 
confirmations  for  imaginary  trades.  However,  in  2001,  the  back-office  supervisor  realized 
that  something  was  amiss  when  he  saw  that  confirmations  were  missing  for  a number  of 
trades.  After  this  problem  was  corrected,  the  fraudulent  actions  were  eventually  identified. 

Management  believed  that  Rusnak  was  running  a small  currency  arbitrage  trading  strategy. 
However,  the  strategy  actually  being  implemented  involved  very  large  currency  positions. 
Rusnak  was  able  to  hide  these  trading  activities  from  management  by  creating  fake  trades  to 
offset  his  real  trades.  The  result  was  the  appearance  of  a trading  strategy  that  involved  small 
positions.  Rusnak  made  a point  of  only  reporting  modest  gains  as  to  not  raise  any  red  flags. 
For  a time,  he  was  able  to  cover  losses  by  selling  deep  in  the  money  options,  which  provided 
him  with  large  option  premiums.  He  further  disguised  his  actions  from  management  by 
entering  false  positions  in  the  firm’s  system  for  calculating  risk  measures  such  as  value  at  risk 
(VaR). 

AIB  s management  was  partially  to  blame  for  its  inexperience  in  being  unable  to  figure 
out  Rusnak’s  trading  activates.  Suspicious  trades  and  trading  profits  were  ignored  by 
management  as  Rusnak  continually  manipulated  the  firms  operations  staff.  For  a time, 
Rusnak  even  forged  trade  confirmations  after  the  back-office  supervisor  realized  the 
incorrect  actions.  This  case  is  similar  to  the  actions  that  led  to  the  bankruptcy  of  Barings. 
However,  Rusnak  did  not  have  the  advantage  of  Leeson  of  also  running  the  back-office 
operations.  Instead,  Rusnak  used  his  strong  personality  to  bully  back-office  employees  and 
took  advantage  of  the  fact  that  trades  were  being  transacted  in  the  over-the-counter  market, 
which  did  not  require  immediate  cash  settlement. 

Union  Bank  of  Switzerland 

During  1997,  Union  Bank  of  Switzerland’s  (UBS)  equity  derivatives  business  lost  between 
$400  and  $700  million.  An  additional  loss  of  $700  million  followed  the  next  year,  which 
was  mostly  due  to  its  large  stake  in  Long-Term  Capital  Management  (LTCM).  Losses  at 
UBS  forced  the  firm  to  merge  with  Swiss  Bank  Corporation  (SBC). 

It  is  unclear  which  trades  directly  influenced  the  losses  at  UBS,  but  it  is  accepted  that  the 
losses  resulted  due  to  inadequate  actions  on  the  part  of  the  firm’s  risk  controllers.  The  equity 
derivatives  business  at  UBS  was  being  run  with  an  unusual  amount  of  independence.  The 
department  s senior  risk  manager  was  also  the  head  of  quantitative  analytics,  which  enabled 
him  to  not  only  provide  input  for  business  decisions,  but  also  have  his  compensation  tied  to 
trading  results. 
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It  is  suspected  that  the  losses  in  1997  were  due,  in  some  part,  to  the  following  four  factors: 
(1)  British  law  tax  changes;  (2)  large  Japanese  bank  warrants,  which  were  inappropriately 
hedged  against  a drop  in  the  underlying  stocks;  (3)  incorrect  valuation  of  long-dated 
options  on  equity  baskets;  and  (4)  inappropriate  modeling  of  other  long-dated  options. 

The  suspected  losses  in  1998  were  largely  tied  to  the  failure  of  LTCM.  UBS’s  exposure  to 
LTCM  involved  a 40%  direct  investment  in  the  hedge  fund  and  a 60%  exposure  to  written 
options  on  the  fund.  By  taking  these  two  positions,  UBS  was  hoping  to  delta-hedge  their 
exposure  to  LTCM;  however,  LTCM’s  lack  of  transparency  made  it  difficult  for  UBS  to  fully 
understand  the  nature  of  its  positions.  It  was  believed  that  UBS  failed  to  properly  analyze 
and  stress  test  its  positions. 

Societe  Generale 

In  January  2008,  it  was  discovered  that  one  of  Societe  Generale’s  junior  traders,  Jerome 
Kerviel,  was  involved  in  unauthorized  trading  activity  that  resulted  in  losses  of  $7.1  billion. 
The  incident  damaged  the  reputation  of  Societe  Generale  and  required  the  bank  to  raise 
additional  funds  to  meet  capital  needs. 

Between  July  2005  and  January  2008,  Kerviel  established  large,  unauthorized  positions  in 
futures  contracts  and  equity  securities.  To  hide  the  size  and  riskiness  of  these  unauthorized 
positions,  he  created  fake  transactions  that  offset  the  price  movements  of  the  actual 
positions.  Kerviel  created  fake  transactions  with  forward  start  dates  and  then  used  his 
knowledge  of  control  personnel  confirmation  timing  to  cancel  these  trades  right  before 
any  confirmations  took  place.  Given  the  need  to  continuously  replace  fake  trades  with  new 
ones,  Kerviel  ultimately  created  close  to  1,000  fictitious  trades  before  the  fraud  was  finally 
discovered. 

A number  of  reasons  were  cited  that  explained  how  Kernels  unauthorized  trading  activity 
went  undetected,  including  the  incorrect  handling  of  trade  cancellations,  the  lack  of  proper 
supervision,  and  the  inability  of  the  banks  trading  system  to  consider  gross  positions. 

Regarding  trade  cancellations,  the  banks  system  was  not  equipped  to  review  trading 
information  that  was  entered  and  later  canceled.  In  addition,  the  system  was  not  set  up  to 
flag  any  unusual  levels  of  trade  cancellations.  Regarding  the  lack  of  supervision,  oversight 
of  Kernels  trading  activity  was  weak,  especially  after  his  manager  resigned  in  early  2007. 
Under  the  new  manager,  Kernel’s  unauthorized  trading  activity  increased  significantly. 
Regarding  the  size  of  Kernels  positions,  the  bank’s  system  was  only  set  up  to  evaluate  net 
positions,  instead  of  both  net  and  gross  positions.  Thus,  the  abnormally  large  size  of  his 
trading  positions  went  undetected.  Had  the  system  properly  monitored  gross  positions,  it  is 
likely  that  the  large  positions  would  have  issued  a warning  sign  given  the  level  of  riskiness 
associated  with  those  notional  amounts.  Also,  the  large  amount  of  trading  commissions 
should  have  raised  a red  flag  to  management. 

Additional  reasons  that  contributed  to  the  unauthorized  positions  going  undetected 
included  the  inaction  of  Kernels  trading  assistant  to  report  fraudulent  activity,  the  violation 
of  the  bank’s  vacation  policy,  the  weak  reporting  system  for  collateral  and  cash  accounts, 
and  the  lack  of  investigation  into  unexpected  reported  trading  gains. 
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Kerviel’s  trading  assistant  had  immediate  access  to  Kernel's  trading  activities.  Because  the 
fictitious  trades  and  the  manipulation  of  the  bank’s  trading  system  went  unreported,  it 
was  believed  that  the  trading  assistant  was  acting  in  collusion  with  Kerviel.  Regarding  the 
bank’s  vacation  policy,  the  rule  that  forced  traders  to  take  two  weeks  of  vacation  in  a row 
was  ignored.  Had  this  policy  been  enforced,  another  trader  would  have  been  responsible  for 
Kennels  positions,  and  likely  would  have  uncovered  the  fraudulent  activity  of  rolling  fake 
transactions  forward.  Regarding  collateral  and  cash  reports,  the  fake  transactions  did  not 
warrant  any  collateral  or  cash  movements,  so  nothing  balanced  the  collateral  and  cash  needs 
of  the  actual  trades  that  were  being  offset.  If  Societe  Generale’s  collateral  and  cash  reports 
had  been  more  robust,  it  would  have  detected  unauthorized  movements  in  the  levels  of 
these  accounts  for  each  individual  trader.  Regarding  reported  trading  gains,  Kerviel  inflated 
trading  gains  above  levels  that  could  be  reasonably  accounted  for  given  his  actual  authorized 
trades.  This  action  should  have  prompted  management  to  investigate  the  source  of  the 
reported  trading  gains. 

Ultimately,  the  unauthorized  trading  positions  were  discovered  by  chance  after  one  of 
Kerviel’s  fake  trades  was  detected  by  control  personnel  during  a routine  monitoring 
of  positions.  Kerviel’s  inability  to  explain  the  fictitious  transaction  led  to  a rigorous 
investigation,  revealing  the  depth  of  his  fraudulent  activities. 

The  lessons  from  this  control  failure  are  similar  to  lessons  from  the  other  case  studies 
of  Kidder  Peabody,  Barings,  and  Allied  Irish  Bank.  Given  the  common  events  among 
these  cases,  the  importance  of  tighter  operational  controls  that  lead  to  better  detection  of 
fictitious  trading  activities  cannot  be  overstated.  Lessons  to  be  learned  specific  to  this  case 
include  the  following: 

• Traders  who  perform  a large  amount  of  trade  cancellations  should  be  flagged,  and,  as  a 
result,  have  a sample  of  their  cancellations  reviewed  by  validating  details  with  trading 
counterparties  to  ensure  cancellations  are  associated  with  real  trades. 

• Tighter  controls  should  be  applied  to  situations  that  involve  a new  or  temporary 
manager. 

• Banks  must  check  for  abnormally  high  gross- to-net-position  ratios.  High  ratios  suggest 
a greater  probability  of  unauthorized  trading  activities  and/or  basis  risk  measurement 
issues. 

• Control  personnel  should  not  assume  the  independence  of  a trading  assistants  actions. 

Trading  assistants  often  work  under  extreme  pressure,  and,  thus,  are  susceptible  to 
bullying  tactics  given  that  job  performance  depends  on  them  following  direction  from 
traders. 

• Mandatory  vacation  rules  should  be  enforced. 

• Requirements  for  collateral  and  cash  reports  must  be  monitored  for  individual  traders. 

• Profit  and  loss  activity  that  is  outside  reasonable  expectations  must  be  investigated 
by  control  personnel  and  management.  Reported  losses  or  gains  can  be  compared  to 
previous  periods,  forecasted  values,  or  peer  performance. 

Daiwa 

A Treasury  bond  trader,  Toshihide  Iguchi,  covered  up  $1.1  billion  in  losses  over  an  1 1-year 
time  span  from  1984  to  1995.  Iguchi  was  able  to  not  only  hide  these  losses,  but  also  forge 
customer  trading  slips,  which  actually  made  his  actions  appear  profitable  to  Daiwa  Bank’s 
management.  This  misleading  reporting  went  undetected  due  to  Iguchi’s  dual  role  as  the 
head  of  both  trading  and  the  back-office  support  function.  When  senior  executives  finally 


©2015  Kaplan,  Inc. 


Page  65 


Topic  6 

Cross  Reference  to  GARP  Assigned  Reading  - Alien,  Chapter  4 

learned  of  the  fraud,  they  failed  to  promptly  report  it  to  the  authorities.  As  a result,  Daiwa 
lost  its  trading  license  in  the  United  States. 

Sumitomo 

Yasuo  Hamanaka,  the  lead  copper  trader  for  Sumitomo,  attempted  to  corner  the  copper 
market  in  a classic  market  manipulation  strategy.  Because  the  copper  market  was  relatively 
small,  Hamanaka  had  the  potential  to  control  and  corner  it. 

He  essentially  established  a dominant  long  position  in  futures  contracts  and  simultaneously 
purchased  large  quantities  of  physical  copper.  As  the  futures  contracts  approached  delivery, 
the  party  with  the  short  position  would  find  little  physical  copper  available  for  delivery 
and  would  be  forced  to  either  pay  a large  premium  for  physical  copper  or  unwind  its  short 
position  by  taking  an  offsetting  long  futures  position.  Either  way,  the  price  of  copper  and/or 
copper  futures  prices  would  rise  and  create  handsome  profits  for  Hamanaka  and  Sumitomo. 

The  risk,  of  course,  was  that  severe  losses  would  be  unavoidable  if  copper  prices  fell. 
Subjecting  the  firm  to  enormous  market  risk  to  help  finance  his  long  copper  positions, 
Hamanaka  sold  put  options,  which  exposed  the  trading  strategy  to  the  risk  of  falling  copper 
prices  even  more. 

Hamanaka’s  unusually  low  degree  of  supervision  and  broad  powers  allowed  him  to 
implement  this  fraudulent  trading  strategy  without  detection,  until  the  Commodity  Futures 
Trading  Commission  (CFTC)  began  an  investigation  of  market  manipulation  in  December 
of  1995.  The  CFTC’s  interest  was  piqued  by  the  possibility  that  Sumitomo  had  purposely 
influenced  the  price  of  copper  with  positions  that  were  unrelated  to  legitimate  commercial 
needs,  a critical  element  in  the  determination  of  market  manipulation. 

In  May  of  1996,  Hamanaka  was  reassigned  to  another  position,  sparking  suspicion  among 
other  copper  traders  who  began  to  sell  their  copper  holdings  in  anticipation  of  Sumitomo 
doing  the  same.  A continuation  of  plummeting  copper  prices  resulted  in  a $2.6  billion 
trading  loss  and  a $150  million  fine  from  the  CFTC.  Hamanaka  was  fired,  prosecuted, 
and  jailed.  The  size  of  Sumitomo’s  copper  positions  in  relation  to  the  size  of  the  market 
exacerbated  the  drop  in  copper  prices. 

Sumitomo’s  lack  of  supervision  on  Hamanaka  created  a high  degree  of  operational  risk, 
which  could  have  been  reduced  with  proper  internal  controls.  For  example,  because 
Hamanaka  had  almost  total  autonomy,  he  was  able  to  give  power  of  attorney  to  brokerage 
firms  to  execute  highly  leveraged  transactions  in  a scheme  to  help  finance  his  accumulation 
of  copper.  In  addition,  the  lack  of  supervision  allowed  him  to  keep  two  sets  of  trading 
books,  one  of  which  reported  large  profits.  The  other  set  recorded  huge  losses  and  was 
secret,  which  allowed  the  illegal  activities  to  go  undetected. 

Large  transactions  should  have  required  multiple  approvals  by  senior  management,  who 
would  have  an  understanding  of  the  trading  strategy.  In  Sumitomo’s  case,  however,  no 
approvals  were  necessary,  and  senior  management  was  unequipped  to  understand  the 
complex  transactions. 
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David  Askin  managed  both  the  Askin  Capital  Management  and  Granite  Capital  hedge 
funds,  which  invested  in  mortgage  securities.  He  misled  investors  by  valuing  positions  with 
incorrect  values  instead  of  dealer  quotes.  Askin  reported  these  incorrect  values  to  potential 
clients  in  order  to  generate  interest  in  his  funds.  Both  funds  went  bankrupt  in  1994, 
suffering  losses  of  $600  million. 

Merrill  Lynch 

In  1987,  Merrill  Lynch  reported  losses  of  $350  million  from  its  trading  in  mortgage 
securities.  The  losses  resulted  from  a mistake  in  the  firms  calculation  of  duration.  The  firm 
was  using  a 13-year  duration  calculation  for  30-year  mortgages,  which  is  generally  correct 
when  considering  all  interest  and  principal  payments.  However,  since  Merrill  Lynch  was 
selling  the  interest-only  portion  of  the  mortgage  securities,  the  correct  duration  was  actually 
more  in-line  with  the  duration  of  the  principal-only  portion,  which  was  30  years. 

National  Westminster  Bank 

National  Westminster  Banks  (NatWest)  traders  used  incorrect  volatility  inputs  for  interest 
rate  caps  and  swaptions  between  1994  and  1997.  It  was  reported  that  traders  were  only 
using  a sample  of  market  volatility  estimates  due  to  the  illiquid  nature  of  these  investments. 
The  loss  from  this  incorrect  reporting  was  close  to  $140  million.  NatWest  was  forced  to  sell 
the  Royal  Bank  of  Scotland  due  to  investors  loss  of  confidence  in  managements  oversight. 

Large  Market  Movement  Cases 

The  following  two  cases  on  Metallgesellschaft  and  Long-Term  Capital  Management 
illustrate  financial  disasters  related  to  large  unexpected  market  movements.  Unlike  the 
previously  discussed  cases,  misleading  positions  were  not  the  cause  of  the  substantial 
losses.  These  two  cases  share  many  common  financial  themes,  including  an  extreme  lack  of 
liquidity. 

Metallgesellschaft 

In  1991,  Metallgesellschaft  Refining  and  Marketing  (MGRM),  an  American  subsidiary 
of  Metallgesellschaft  (MG),  an  international  trading,  engineering,  and  chemicals 
conglomerate,  implemented  a marketing  strategy  designed  to  insulate  customers  from  price 
volatility  in  the  petroleum  markets  for  a fee. 

MGRM  offered  customers  contracts  to  buy  fixed  amounts  of  heating  oil  and  gasoline  at 
a fixed  price  over  a 5-  or  10-year  period.  The  fixed  price  was  set  at  a $3  to  $5  per  barrel 
premium  over  the  average  futures  price  of  contracts  expiring  over  the  next  12  months. 
Customers  were  given  the  option  to  exit  the  contract  if  the  spot  price  rose  above  the  fixed 
price  in  the  contract,  in  which  case  MGRM  would  pay  the  customer  half  of  the  difference 
between  the  futures  price  and  contract  price.  A customer  might  exercise  this  option  if  she 
did  not  need  the  product  or  if  she  were  experiencing  financial  difficulties.  In  later  contracts, 
the  customer  could  receive  the  entire  difference  in  exchange  for  a higher  fixed  contract 
price. 
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The  customer  contracts  effectively  gave  MGRM  a short  position  in  long-term  forward 
contracts.  MGRM  hedged  this  exposure  with  long  positions  in  near-term  futures  using  a 
stack-and-roll  hedging  strategy.  In  this  strategy,  the  firm  buys  a bundle  of  futures  contracts 
with  the  same  expiry  date,  known  as  a stack.  Just  prior  to  delivery,  the  firm  liquidates  the 
stack  and  buys  another  stack  of  contracts  with  longer  expirations,  known  as  a roll.  The  level 
of  uncertainty  in  the  cost  of  this  strategy  should  have  prompted  MGRM  to  use  a valuation 
reserve  since  they  were  currently  basing  roll  costs  on  historical  data  rather  than  potential 
future  costs. 

MGRM  used  short-term  futures  to  hedge  because  alternatives  in  the  forward  market  were 
unavailable  and  long-term  futures  contracts  were  highly  illiquid.  As  it  was,  MGRM’s  open 
interest  in  unleaded  gasoline  contracts  was  55  million  barrels  in  the  fall  of  1993,  compared 
to  average  trading  volume  of  15  to  30  million  barrels  per  day.  In  December  of  1993, 
MGRM  cashed  out  its  positions  and  reported  losses  of  approximately  $1.5  billion. 

Although  some  market  observers  cite  the  maturity  mismatch  between  MGRM’s  short 
position  in  long-term  fixed-rate  contracts  with  customers  and  its  long  position  in  near-term 
futures  contracts,  many  economists  believe  this  hedging  strategy  is  fundamentally  sound. 
Over  the  life  of  a properly  constructed  hedge,  the  cash  flows  from  the  forward  and  futures 
contracts  would  balance  out,  provided  the  hedging  firm  could  withstand  interim  cash  flow 
requirements  from  marked  to  market  losses,  margin  calls,  credit  risks,  and  liquidity  risks 
associated  with  adverse  market  movements.  The  fundamental  issue  for  MGRM  was  a cash 
flow  problem  that  constrained  the  company’s  ability  to  ride  out  the  hedge.  This  cash  flow 
problem  had  several  causes  and  severe  consequences,  which  are  discussed  next. 

Gains  and  losses  on  forward  contracts  are  realized  at  the  agreements  expiration,  whereas 
futures  contracts  are  marked  to  market  such  that  the  gains  and  losses  are  realized  on  a daily 
basis.  In  MGRM’s  case,  gains  and  losses  on  its  customer  contracts  were  realized  if  and  when 
the  customers  took  delivery,  which  would  occur  over  a 5-  to  10-year  period. 

During  1993,  oil  prices  dropped  from  a high  of  about  $21  per  barrel  to  about  $14  per 
barrel,  resulting  in  losses  of  $900  million  on  MGRM’s  long  positions,  which  were  realized 
immediately  as  the  futures  contracts  were  marked  to  market.  The  offsetting  gains  on 
their  customer  contracts,  however,  would  not  be  realized  for  years  to  come,  which  created 
potential  short-term  cash  outflows,  and  resulted  in  funding  liquidity  risk.  Declining  oil 
prices  also  created  margin  calls  that  exacerbated  the  cash  flow  problem.  Due  to  these  losses, 
MG  ordered  MGRM  to  close  out  of  its  customer  contracts.  This  forced  the  firm  to  unwind 
its  positions  at  very  unfavorable  terms. 

According  to  German  accounting  rules,  MGRM  was  required  to  report  losses  associated 
with  its  futures  hedges,  but  was  not  permitted  to  show  associated  gains  from  its  customer 
contracts,  which  the  futures  were  meant  to  hedge.  The  magnitude  of  the  losses  caused  its 
credit  rating  to  drop,  increasing  its  perceived  credit  risk  and  restricting  the  company’s  access 
to  credit.  The  losses  also  created  a crisis  of  confidence  with  its  counterparties,  which  began 
to  suspect  the  firm  was  speculating  rather  than  hedging  and,  therefore,  demanded  collateral 
to  secure  contract  performance.  These  same  concerns  induced  the  New  York  Mercantile 
Exchange  to  increase  the  firm’s  margin  requirements.  It  is  interesting  to  note  that  these 
consequences,  which  aggravated  an  already  mounting  cash  flow  problem,  did  not  stem  from 
a fundamental  flaw  in  MGRM’s  hedging  program.  They  occurred  due  to  overly  conservative 
financial  reporting  requirements  that  failed  to  recognize  the  relationship  between  hedging 
losses  and  offsetting  gains  on  the  underlying  positions  that  motivated  the  hedge  in  the  first 
place. 
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The  cash  outflows  might  have  been  tolerable  and  possibly  balanced  out  by  cash  inflows  over 
the  life  of  the  hedge  were  it  not  for  the  sheer  size  of  MGRM’s  position,  which  would  have 
taken  ten  days  to  liquidate.  To  liquidate  without  affecting  market  prices  would  have  taken 
from  20  to  55  days.  As  a result,  the  company  lacked  liquidity  to  unwind  its  positions,  if 
necessary,  without  significant  market  impact,  and  was  therefore  subject  to  trading  liquidity 
risk.  To  make  matters  worse,  MGRM  was  carrying  a heavy  debt  load  and  had  little  equity 
to  withstand  losses  and  cash  flow  problems  on  positions  of  this  size. 

Long-Term  Capital  Management 

Long-Term  Capital  Management  (LTCM),  a hedge  fund  founded  in  early  1994,  generated 
stellar  returns  in  its  first  few  years  of  operation:  43%  in  1995  and  41%  in  1996.  The 
partners  worked  together  at  Salomon  Brothers  (now  Citigroup)  and,  given  their  success, 
decided  to  start  their  own  fund  and  proceeded  to  seek  capital  from  investors.  Funding  was 
provided  to  LTCM  despite  the  secretive  nature  of  its  positions.  In  addition,  investors  were 
locked  into  investments  for  long  periods  of  time  in  order  to  prevent  liquidation  issues  since 
the  fund  was  focused  on  long-term  investment  strategies.  In  the  later  years  of  operations, 
the  partners  at  LTCM  invested  a large  portion  of  their  net  worth  in  the  fund  since  they 
believed  so  strongly  in  the  success  of  their  trading  strategies. 

With  positions  in  equity,  fixed  income,  and  derivatives  markets  all  around  the  globe,  LTCM 
grew  enormously.  At  the  beginning  of  1998,  it  had  $125  billion  of  assets  on  $4.7  billion 
of  equity  capital,  yielding  leverage  of  28  to  1.  Although  this  balance  sheet  leverage  was  in 
line  with  other  large  investment  banks,  it  underestimated  the  true  leverage  by  overlooking 
the  economic  leverage  in  LTCM  s positions.  For  example,  LTCM’s  positions  represented 
notional  principal  in  excess  of  $1  trillion.  The  astronomical  use  of  leverage  was  possible 
because  financial  institutions  often  waived  initial  margin  requirements  based  on  the 
reputation  of  the  principals,  freeing  up  capital  to  take  on  more  leverage. 

Most  of  LTCM  s investment  strategies  could  be  classified  as  relative  value,  credit  spreads, 
and  equity  volatility.  Their  relative  value  strategies  involved  arbitraging  price  differences 
among  similar  securities  and  profiting  when  the  prices  converged.  One  benefit  of  this 
convergence  strategy  is  that  being  long  and  short  similar  securities  hedges  risk  exposure  and 
reduces  volatility. 

LTCM  believed  that,  although  yield  differences  between  risky  and  riskless  fixed-income 
instruments  varied  over  time,  the  risk  premium  (or  credit  spread)  tended  to  revert  to 
average  historical  levels.  Noticing  that  credit  spreads  were  historically  high,  they  entered 
into  mortgage  spreads  and  international  high-yield  bond  spreads  intending  to  profit  when 
the  spreads  shrank  to  more  typical  historical  levels.  Similarly,  their  equity  volatility  strategy 
assumed  that  volatility  on  equity  options  tended  to  revert  to  long-term  average  levels.  When 
volatility  implied  by  equity  options  was  abnormally  high,  LTCM  “sold  volatility”  until  it 
regressed  to  normal  levels. 

In  August  of  1998,  Russia  unexpectedly  defaulted  on  its  debt,  sending  Russian  interest 
rates  soaring  to  200%  and  crushing  the  value  of  the  ruble.  This  economic  shock  triggered 
investor  concern  about  already  faltering  economies  in  the  Pacific  rim,  causing  the  yields 
on  developing  nations  debt  to  increase  and  a flight  to  the  quality  of  government  bonds 
in  industrialized  countries.  Yields  on  corporate  debt — both  high  and  low  quality — also 
increased  sharply.  In  other  words,  the  flight  to  quality  increased,  rather  than  decreased, 
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credit  spreads,  causing  huge  losses  for  LTCM.  Shortly  thereafter,  Brazil  also  devalued  its 
currency,  thereby  further  increasing  interest  rates  and  risk  premiums.  The  general  increase 
in  volatility  also  generated  losses  in  LTCMs  equity  volatility  strategies. 

Although  prices  in  relative  value  arbitrage  strategies  sometimes  diverge  and  create  temporary 
losses  before  they  ultimately  converge,  the  large  increase  in  yield  spread  caused  huge  losses 
and  severe  cash  flow  problems  caused  by  realizing  marked  to  market  losses  and  meeting 
margin  calls.  The  effect  of  the  losses  and  the  cash  flow  crisis  were  compounded  by  the  firms 
hyper  leverage.  LTCM  lost  44%  of  its  capital  in  just  one  month.  The  firms  lack  of  equity 
capital  created  a cash  flow  crisis  and  made  it  necessary  to  liquidate  positions  to  meet  margin 
calls. 

If  LTCM  had  sufficient  equity  to  withstand  the  cash  flow  crisis  created  by  the  sharp 
divergence  of  asset  prices,  it  might  have  ultimately  been  able  to  realize  the  benefits  of 
convergence.  Instead,  LTCM  risked  the  possibility  of  insolvency  before  convergence  could 
occur.  Notice  the  similarity  to  the  funding  liquidity  risk  in  the  Metal Igesellschaft  case. 

One  of  the  fundamental  risks  faced  by  LTCM  was  model  risk,  the  risk  that  valuation  or 
trading  models  are  flawed.  Their  models  assumed  that  historical  relationships  were  useful 
predictors  of  future  relationships,  which  is  often  true  in  the  absence  of  economic  shocks. 
However,  external  shocks  often  cause  correlations  that  are  historically  low  to  increase 
sharply.  When  Russia  defaulted  on  its  debt,  credit  spreads,  risk  premiums,  liquidity 
premiums,  and  volatility  around  the  world  increased.  LTCM  partly  adjusted  for  this 
possibility  by  using  correlations  that  were  greater  than  historical  correlations  in  their  stress 
tests.  However,  these  adjustments  inadequately  captured  the  spike  in  correlations  caused  by 
the  cascading  effect  of  economic  shocks. 

The  models  also  assumed  that  low-frequency/high-severity  events  were  uncorrelated 
over  time.  Rather  than  occurring  highly  infrequently  and  independently  over  time,  one 
economic  shock  triggered  another  so  that  extremely  low  probability  events  were  occurring 
several  times  per  week.  As  a result,  traditional  VaR  models  underestimated  risk  in  the  tails  of 
the  distribution. 

LTCM  was  diversified  across  the  globe,  across  different  asset  classes,  and  across  different 
trading  strategies.  Fundamentally,  however,  all  of  its  trading  strategies  were  based  on  the 
notion  that  risk  premiums  and  market  volatility  would  ultimately  decline.  Since  the  success 
of  all  its  trading  strategies  hinged  on  a single  economic  prediction,  LTCM  was  far  less 
diversified  than  a cursory  examination  would  suggest  and  was,  therefore,  subject  to  market 
risk. 

LTCMs  extreme  leverage  enabled  it  to  assume  extremely  large,  high-profile  positions  that 
attracted  the  attention  of  imitators  who  initiated  similar  or  identical  trades,  thereby  adding 
to  the  size  of  LTCMs  positions  in  some  sense.  When  it  became  necessary  to  liquidate 
positions,  the  firm  found  itself  in  the  position  of  being  a market  maker,  rather  than  a price 
taker  as  traditional  valuation  models  assume.  In  addition  to  suffering  the  price  impact  of 
liquidating  its  own  enormous  positions,  LTCM  found  itself  competing  with  imitators  who 
were  also  liquidating  their  positions.  Market  prices  largely  depended  on  expectations  about 
LTCMs  actions. 
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Falling  prices  resulting  from  LTCM’s  forced  liquidation  created  more  marked  to  market 
losses  and  margin  calls,  which  forced  more  liquidations  that  resulted  in  a self- reinforcing 
cycle.  LTCM  considered  the  possibility  of  market  impact  to  some  extent  in  its  short 
risk  measures,  but  underestimated  the  magnitude  of  its  influence  on  market  prices, 
particularly  in  the  event  of  forced  liquidation.  Trading  liquidity  risk  was  also  present  in  the 
Metallgesellschaft  case. 

As  a hedge  fund,  LTCM  s reporting  obligation  to  regulators  was  limited.  Although  the  size 
of  its  positions  required  financial  statement  reporting  and  daily  position  reporting,  these 
reports  were  incomplete  and  lacked  disclosure  of  derivative  positions  and  trading  strategies. 

Ultimately,  the  Federal  Reserve  Bank  of  New  York  orchestrated  a bailout  in  which  14 
leading  banks  and  investment  houses  invested  $3.65  billion  for  a 90%  stake  in  LTCM. 

The  LTCM  case  demonstrated  the  need  for  several  suggested  improvements  when 
implementing  risky  investment  strategies  and  seeking  investor  funds.  One  suggestion  is  to 
ensure  that  an  initial  margin  is  provided.  LTCM  had  to  mark  their  positions  to  market, 
but  in  many  cases,  the  initial  margin  was  waved.  Another  suggestion  is  to  incorporate 
potential  liquidation  costs  into  prices  in  the  event  of  adverse  market  conditions.  A third 
suggestion  is  the  need  for  greater  position  disclosure.  A final  suggestion  is  better  utilization 
of  stress  testing  when  evaluating  financial  risk;  namely  credit  risk.  LTCM  planned  for  the 
possibility  of  increasing  disruptions  in  short-term  market  movements.  However,  it  failed 
to  supplement  VaR  measures  with  stress  scenarios  that  incorporated  the  possibility  that 
competitors  were  holding  similar  positions  that  might  be  liquidated  at  the  same  time  in  the 
event  of  extreme  market  movements. 

Customer  Conduct  Cases 

These  cases  describe  actions  that  led  to  significant  decreases  in  firm  reputation  among  its 
customers  (i.e.,  reputational  risk).  The  actions  relate  to  misleading  investors  on  the  risk  of 
certain  investments.  Failure  to  perform  the  necessary  due  diligence  subjected  customers 
to  huge  losses  which  were,  in  some  cases,  followed  by  fines  and  settlements  for  the  firms 
involved.  The  actions  themselves,  however,  did  not  create  direct  losses  for  the  firms. 

Bankers  Trust 

Procter  & Gamble  (P&G)  and  Gibson  Greetings  sought  the  assistance  of  Bankers  Trust 
(BT)  to  help  them  reduce  funding  costs.  BT  used  derivative  trades,  which  promised  the 
two  companies  a high-probability,  small  reduction  in  funding  costs  in  exchange  for  a low- 
probability,  large  loss.  Unfortunately,  the  derivative  trades  only  resulted  in  significant  losses 
for  both  P&G  and  Gibson. 

The  derivative  structures  developed  by  BT  were  intentionally  complex  and  prevented  P&G 
and  Gibson  from  fully  understanding  the  trade  values  and  risks  that  were  involved.  In 
addition,  the  structures  were  not  comparable  to  other  company  derivative  trades  making  it 
impossible  to  get  a competitive  quote.  P&G  and  Gibson  were  further  misled  into  thinking 
that  the  structures  were  tailored  to  meet  their  individual  needs.  In  1994,  P&G  and  Gibson 
finally  realized  that  they  had  been  misled  after  discovering  that  they  had  suffered  huge 
losses.  As  a result,  the  two  companies  sued  BT. 
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It  was  common  practice  for  BT  to  tape  phone  conversations  of  its  traders  and  marketers  in 
an  effort  to  resolve  possible  verbal  contract  disputes.  Unfortunately  for  BT,  these  tapes  were 
used  as  evidence  during  the  lawsuit  since  they  picked  up  internal  conversations  regarding 
the  derivative  structures  in  question.  In  some  of  these  conversations,  BT’s  staff  bragged 
about  how  badly  they  fooled  clients  with  complex  structures  and  showed  how  price  quotes 
given  to  P&G  and  Gibson  were  manipulated. 

The  Bankers  Trust  scandal  severely  damaged  its  reputation  and  forced  its  CEO  to  resign. 

BT  was  eventually  acquired  by  Deutsche  Bank  and  ultimately  dismantled.  The  actions  at 
BT  led  to  tighter  controls  for  dealing  with  clients  at  other  firms.  This  case  demonstrated 
the  importance  of  matching  trades  with  a clients  needs  and  providing  price  quotes  that 
are  independent  from  the  front  office.  It  also  demonstrated  the  importance  of  exercising 
caution  with  any  form  of  communication  that  could  eventually  be  made  public,  as  it  could 
damage  a firm’s  reputation  if  unethical  practices  are  present. 

JP Morgan,  Citigroup,  and  Enron 

In  the  wake  of  the  Bankers  Trust  scandal,  investment  banks  worked  to  prevent  future 
exploitation  of  customers.  However,  at  the  time,  banks  still  did  not  assume  responsibility  for 
protecting  third  parties  against  adverse  actions  taken  by  its  borrowers.  This  changed  once 
the  financial  shenanigans  at  Enron  surfaced  in  2001,  which  eventually  led  to  the  company’s 
bankruptcy.  The  Enron  scandal  revealed  the  use  of  questionable  accounting  practices  to 
disguise  the  size  of  borrowings  from  lenders  and  investors.  One  practice  accounted  for 
borrowed  amounts  as  oil  futures  contracts. 

Given  that  the  Enron  Corporation  was  heavily  involved  in  the  energy  markets,  it  was  not 
uncommon  for  the  company  to  trade  large  amounts  of  oil  futures  contracts.  However,  the 
futures  contracts  that  were  actually  used  did  not  involve  any  stake  in  oil  price  movements. 
Enron  collected  cash  by  selling  oil  for  future  delivery,  and,  in  turn,  agreed  to  buy  back 
the  delivered  oil  at  a fixed  price.  Thus,  no  oil  was  actually  delivered,  so  the  agreement 
was  essentially  a loan  where  the  company  paid  cash  at  a later  date  to  receive  cash  at  the 
beginning  of  the  agreement.  The  advantage  for  Enron  was  that  the  company  did  not  have  to 
account  for  these  transactions  as  loans  on  its  financial  statements,  which  made  the  company 
look  healthier  to  both  investors  and  lenders. 

JPMorgan  Chase  and  Citigroup  were  the  main  counterparties  in  these  transactions.  When 
Enrons  actions  were  ultimately  revealed,  the  investment  banks  declared  that  they  shared 
no  role  in  determining  how  the  transactions  were  accounted  for  on  Enron’s  financial 
statements.  According  to  JPMorgan  and  Citigroup,  the  transactions  were  correctly  reported 
as  loans  on  the  bank’s  financial  statements,  and  therefore,  they  did  not  trick  their  own 
investors  and  lenders.  However,  it  was  later  revealed  that  the  investment  banks  fully 
understood  Enron’s  intent  when  entering  into  these  loan-type  transactions.  As  a result, 
JPMorgan  and  Citigroup  agreed  to  pay  a $286  million  fine  for  assisting  with  fraud  against 
Enron  investors.  In  addition,  future  controls  were  established  to  improve  the  transparency 
of  client  derivative  transactions  for  investors. 
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Prudential-Bache  Securities  misled  investors  regarding  the  risk  of  investments  in  limited 
partnerships.  The  incorrect  identification  of  risk  impacted  thousands  of  investors  and  was  so 
severe  that  it  resulted  in  over  $1  billion  in  fines  and  settlements. 

Morgan  Grenfell  Asset  Management 

A fund  manager  at  Morgan  Grenfell  Asset  Management  incorrectly  directed  investors  into 
highly  speculative  equity  investments.  In  addition,  this  manager  found  a way  to  bypass  legal 
restrictions  regarding  the  percentage  of  a stock  that  a mutual  fund  could  hold  at  one  time. 

In  1995,  Morgan  Grenfell  was  ordered  to  pay  approximately  $600  million  to  investors  to 
make  up  for  losses  incurred  by  incorrectly  investing  in  speculative  securities. 
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Key  Concepts 


LO  6.1 

Drysdale  Securities  was  able  to  borrow  $300  million  in  unsecured  funds  from  Chase 
Manhattan  by  exploiting  a flaw  in  the  system  for  computing  the  value  of  collateral. 

The  head  of  the  government  bond  trading  desk  at  Kidder  Peabody,  Joseph  Jett,  reported 
substantial  artificial  profits.  After  the  false  profits  were  detected,  $330  million  in  previously 
reported  gains  had  to  be  reversed. 

Hidden  trading  losses  at  Barings  induced  Nick  Leeson  to  abandon  hedging  strategies  in 
favor  of  speculative  strategies.  A lack  of  operational  oversight  and  his  dual  roles  as  trader 
and  settlement  officer  allowed  him  to  conceal  his  activities  and  losses. 

A currency  trader  for  Allied  Irish  Bank,  John  Rusnak,  hid  $691  million  in  losses.  Rusnak 
bullied  back-office  workers  into  not  following-up  on  trade  confirmations  for  imaginary 
trades. 

UBS’s  equity  derivatives  business  lost  millions  in  1997  and  1998.  The  losses  were  mostly 
due  to  incorrect  modeling  of  long-dated  options  and  the  firm’s  stake  in  Long-Term  Capital 
Management. 

Jerome  Kerviel,  a junior  trader  at  Societe  Generale,  participated  in  unauthorized  trading 
activity  and  concealed  this  activity  with  fictitious  offsetting  transactions.  The  fraud  resulted 
in  $7.1  billion  in  losses  and  severely  damaged  the  reputation  of  Societe  Generale. 

Extreme  leverage,  a lack  of  diversification,  and  inadequate  risk  models  put  Long-Term 
Capital  Management  in  a cash  flow  crisis  when  an  economic  shock  created  intolerable 
marked  to  market  losses  and  margin  calls.  A forced  liquidation  of  its  huge  positions  drove 
prices  down,  further  compounding  their  losses. 

The  financial  crisis  at  Metallgesellschaft  resulted  fundamentally  from  cash  flow  timing 
differences  associated  with  the  positions  making  up  its  hedge.  Cash  flows  on  short  forward 
contracts  occurred  over  the  distant  future.  Cash  flows  on  long  futures  contracts  occurred 
daily.  In  addition,  the  sizes  of  the  positions  were  so  large  that  it  prevented  the  company 
from  liquidating  its  positions  without  incurring  large  losses. 

Bankers  Trust  developed  derivative  structures  that  were  intentionally  complex  and  prevented 
Procter  & Gamble  and  Gibson  Greetings  from  fully  understanding  the  trade  values  and 
risks  that  were  involved.  In  taped  phone  conversations,  BT’s  staff  bragged  about  how  badly 
they  fooled  clients. 

JPMorgan  Chase  and  Citigroup  were  the  main  counterparties  in  Enron’s  derivative 
transactions.  After  the  Enron  scandal  was  revealed,  these  investment  banks  agreed  to  pay  a 
$286  million  fine  for  assisting  with  fraud  against  Enron  shareholders. 
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Concept  Checkers 


1.  Which  of  the  following  was  least  influential  in  the  Metallgesellschaft  debacle? 

A.  Fraud. 

B.  Timing  differences  in  the  cash  flows  of  its  long  and  short  positions. 

C.  The  size  of  its  positions  influenced  market  prices. 

D.  Financial  reporting  requirements. 

2.  Which  of  the  following  financial  disasters  created  a situation  that  resembled  a classic 
Ponzi  scheme  where  artificial  profits  are  shown,  but  never  materialize  into  actual 
profits? 

A.  Drysdale  Securities. 

B.  Bankers  Trust. 

C.  Kidder  Peabody. 

D.  Merrill  Lynch. 

3.  In  1997,  equity  derivative  losses  at  the  Union  Bank  of  Switzerland  (UBS)  appeared 
to  be  related  to  four  different  factors.  Of  the  factors  shown  below,  which  ones  are 
unique  to  UBS  (i.e.,  did  not  impact  competitors)? 

I.  British  law  tax  changes  and  large  Japanese  bank  warrants. 

II.  Incorrect  valuation  of  long-dated  options  on  equity  baskets  and  inappropriate 
modeling  of  other  long-dated  options. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

4.  Hedging  models  at  Long-Term  Capital  Management  accounted  for  the: 

I.  spike  in  correlations  among  asset  class  prices  during  times  of  economic  crisis. 

II.  dependence  of  catastrophic  events  through  time  during  global  economic 
shocks. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 

5.  Nick  Leeson’s  now  infamous  trading  strategies  in  1994  and  1995  at  Barings  Bank 
focused  on  calculated  bets  on  the  Nikkei  225.  Which  of  the  following  trading 
strategies  did  not  contribute  to  the  staggering  losses  that  ultimately  forced  Barings 
into  bankruptcy? 

I.  Long-long  futures  arbitrage. 

II.  Long  straddle. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 
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Concept  Checker  Answers 


1.  A The  fundamental  problem  at  Metallgesellschaft  was  that  the  timing  of  the  marked  to  market 

losses  and  margin  calls  on  its  futures  contracts  were  mismatched  with  the  cash  flows  on  the 
forward  contracts  it  was  trying  to  hedge.  The  problem  was  compounded  by  the  enormous 
size  of  the  positions,  which  made  liquidation  costly,  and  by  conservative  financial  reporting 
requirements  that  did  not  recognize  the  gains  on  the  forward  contracts.  Neither  fraud  nor 
deception  is  central  to  the  Metallgesellschaft  case. 

2.  C The  head  of  the  government  bond  trading  desk  at  Kidder  Peabody,  Joseph  Jett,  misreported 

a series  of  trades,  which  allowed  him  to  report  substantial  artificial  profits.  After  these  errors 
were  detected,  $350  million  in  falsely  reported  gains  had  to  be  reversed.  This  situation  of 
hypothetical  profits  in  place  of  promised  profits  resembles  a classic  Ponzi  scheme. 

3.  B Statement  T resembles  factors  that  affected  UBS  as  well  as  its  competitors.  The  bank  warrant 

positions  may  have  been  larger  than  its  competitors,  but  they  were  not  unique  to  UBS. 
Statement  II  resembles  factors  that  were  unique  to  UBS. 

4.  D The  models  used  by  LTCM  primarily  relied  on  historical  correlations  to  measure  risk.  In 

doing  so,  the  firm  failed  to  account  for  the  spike  in  correlations  caused  by  economic  shocks, 
such  as  Russia  defaulting  on  its  debt.  The  models  also  did  not  consider  that  infrequent 
shocks  might  be  clustered  in  time,  one  causing  another.  As  it  happened,  risk  premiums  rose 
across  the  globe,  forcing  LTCM  to  liquidate  positions  because  its  relatively  miniscule  equity 
basis  was  insufficient  to  withstand  the  losses.  The  size  of  its  positions  aggravated  negative 
price  trends  that  were  already  set  in  motion. 

5.  B After  incurring  huge  trading  losses,  Leeson  made  an  effort  to  recover  those  losses  by 

abandoning  his  original  hedged  position  in  a long-short  futures  arbitrage  strategy  and 
initiated  a long-long  futures  position  on  two  trading  exchanges.  As  well,  one  of  his  other 
trading  strategies  was  selling  straddles  on  the  Nikkei  225  (which  would  have  been  profitable 
had  the  underlying  index  remained  relatively  unchanged). 
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Topic  7 

Exam  Focus 

The  credit  crisis  that  began  in  2007  was  the  worst  since  the  Great  Depression.  In  fact,  in 
many  ways  it  was  even  more  damaging  given  the  contagion  effect  of  the  crisis  across  global 
financial  markets.  Virtually  all  financial  institutions  were  affected  to  some  measure;  many 
had  to  be  bailed  out,  and  some  failed  completely  (e.g.,  Bear  Sterns,  Lehman  Brothers).  In  this 
topic,  we  look  at  the  background  and  origin  of  the  crisis,  examine  the  causes  of  the  problems, 
and  look  at  the  key  lessons  learned.  We  begin  by  discussing  the  U.S.  housing  market, 
followed  by  a detailed  overview  of  the  mortgage  securitization  process,  and  examine  various 
types  of  asset-backed  securities.  For  the  exam,  understand  the  key  causes  of  the  housing  crisis, 
the  structure  of  asset-backed  securities  (and  additional  securitized  products  derived  from 
them),  including  the  various  risks  of  tranches,  the  priority  of  interest  and  principal  (pre) 
payment  cash  flows,  and  why  asset-backed  securities  may  be  considered  riskier  than  similarly 
rated  bonds. 


Factors  Contributing  to  the  Credit  Crisis 


LO  7.1:  Analyze  various  factors  that  contributed  to  the  Credit  Crisis  of  2007  and 
examine  the  relationships  between  these  factors. 


The  period  leading  up  to  the  2007  credit  crisis,  especially  the  period  between  2000  and 
2006,  was  characterized  by  ever-increasing  real  estate  prices  within  a very  low  interest  rate 
environment.  This  period  saw  a significant  rise  in  subprime  mortgage  lending.  Subprime 
mortgages  are  mortgages  that  are  considered  to  be  a higher  risk  than  traditional  mortgages 
and  are  granted  to  borrowers  with  weak  credit  histories. 

Relaxed  Lending  Standards 

With  the  increase  in  home  prices  leading  up  to  the  year  2000,  many  families  found 
themselves  unable  to  qualify  for  mortgages  and  afford  a home  based  on  their  incomes.  In 
addition,  many  families  with  weaker  credit  histories  did  not  have  a sufficiently  strong  credit 
profile  to  qualify  for  a mortgage.  Starting  around  2000,  mortgage  lenders  began  to  relax 
their  mortgage  underwriting  standards  in  order  to  attract  new  entrants  into  the  market  and 
began  lending  more  to  higher-risk  borrowers.  It  was  typical  for  lenders  to  offer  adjustable 
rate  mortgages  (ARMs)  with  teaser  rates  that  were  very  low  for  the  first  few  years  before  the 
rates  increased  significantly  in  later  years.  Teaser  rates  of  1%  or  2%  were  not  uncommon. 
From  the  lenders’  perspective,  risks  were  low  as  the  continued  increase  in  home  prices 
meant  that  a potential  borrower  default  was  adequately  mitigated  by  a stable  and  increasing 
collateral  value  (i.e.,  the  home). 
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At  the  same  time,  the  federal  government  pressured  lenders  to  increase  lending  to  low- 
and  medium-  income  households  and  was  not  incentivized  to  regulate  mortgage  lending. 
Relaxed  lending  standards  and  the  lack  of  adequate  government  regulation  gave  rise  to 
predatory  lending.  Liar  loans  (no  vetting  of  the  accuracy  of  an  applicant’s  information)  and 
NINJA  borrowers  (no  income,  no  job,  no  assets)  became  common.  As  lending  standards 
were  relaxed,  certain  zip  codes  in  the  United  States  that  previously  had  high  levels  of 
rejected  mortgage  applications  saw  a material  rise  in  mortgage  origination  (i.e.,  more 
applications  were  accepted)  during  the  2000-2007  period. 


The  Housing  Bubble 

As  mortgage  origination  increased  and  lending  standards  were  relaxed,  additional  demand 
continued  to  drive  up  home  prices.  However,  by  the  second  half  of  2006,  many  of  the  teaser 
rates  ended.  At  the  higher  interest  rates,  borrowers  could  no  longer  afford  their  mortgages, 
and  lenders  were  forced  to  foreclose  on  their  homes.  This  put  downward  pressure  on 
demand,  and  home  prices  started  to  decline.  As  more  owners  foreclosed,  the  supply  of 
homes  increased,  and  demand  and  home  prices  declined  further  in  a self-feeding  loop. 

An  important  feature  of  mortgage  lending  in  the  United  States  is  that  in  several  states, 
mortgages  are  nonrecourse.  Under  a nonrecourse  mortgage,  a lender  can  only  take 
possession  of  (have  recourse  to)  the  borrower’s  home  but  not  to  any  of  their  other  assets. 

It  is  important  to  understand  the  implications  of  this  feature.  In  essence,  when  borrowers 
took  out  a mortgage,  they  also  purchased  an  American-style  put  option  that  allowed  them 
to  sell  their  home  at  any  time  until  mortgage  expiration  for  the  principal  outstanding  on  the 
mortgage.  For  borrowers,  especially  for  those  who  borrowed  100%  or  close  to  100%  of  the 
value  of  their  homes,  this  meant  that  when  their  home  price  declined  below  the  outstanding 
value  of  the  mortgage  resulting  in  negative  equity  in  their  homes,  it  was  no  longer  in 
the  borrower’s  best  interest  to  service  this  mortgage.  Instead,  the  borrower’s  optimal 
decision  was  to  exercise  the  put  option  and  sell  the  home  to  the  lender  at  the  price  of  their 
outstanding  mortgage. 

Many  borrowers  suffered  greatly  as  they  lost  their  family  homes.  For  other  borrowers, 
foreclosing  was  simply  the  economically  feasible  solution.  With  the  increase  in  foreclosures, 
lenders  were  faced  with  diminishing  recovery  rates,  which  declined  from  an  average  75% 
prior  to  the  crisis  to  as  low  as  25%  during  the  crisis. 


The  Role  of  Asset-Backed  Securities 


LO  7.2:  Describe  the  mechanics  of  asset-backed  securities  (ABS)  and  ABS 
collateralized  debt  obligations  (ABS  CDOs)  and  explain  their  role  in  the  2007 
credit  crisis. 


Securitization  is  the  process  of  pooling  mortgages  into  a large  pool,  dividing  the  pool 
into  smaller  units,  and  selling  the  units  as  financial  investments  to  investors.  By  selling 
mortgages  to  investors,  lending  institutions  could  repackage  their  mortgages  and  transfer 
their  risk  to  the  markets. 
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The  securitization  process  inevitably  influenced  the  mortgage  origination  and  underwriting 
process.  Mortgage  originators’  decisions  were  influenced  primarily  by  whether  the 
underlying  mortgages  could  be  pooled  and  resold  rather  than  whether  the  risks  were 
acceptable  to  the  lending  institution.  The  only  relevant  information  to  aid  in  this  decision 
was  the  borrower’s  credit  score  and  the  loan-to-value  ratio  (i.e.,  the  ratio  of  the  mortgage 
amount  to  the  appraised  value  of  the  home). 

Asset-Backed  Securities 

An  asset-backed  security  (ABS)  is  a financial  security  created  through  securitization  from 
the  cash  flows  of  financial  assets  including  mortgages,  loans,  auto  loans,  bonds,  credit  card 
receivables,  or  even  aircraft  leases.  To  create  an  ABS,  the  originator  of  a portfolio  of  assets 
sells  its  assets  to  a special  purpose  vehicle  (SPV),  which  is  a bankruptcy- remote  entity  set 
up  solely  to  acquire  and  finance  assets.  (It  is  typically  a subsidiary  of  the  originator.)  After 
the  financial  assets  are  sold  to  the  SPV,  the  cash  flows  from  the  assets  are  then  allocated  to 
different  segments  based  on  the  priority  of  cash  flows.  The  segments  are  called  tranches,  and 
typically  each  security  has  three  tranches:  the  senior  tranche,  the  mezzanine  tranche,  and  the 
equity  tranche.  Figure  1 is  an  example  of  an  ABS  structure  with  three  tranches. 


Figure  1 : ABS  Structure 


From  a cash  flow  perspective , the  senior  tranche  has  the  lowest  expected  return  at  5% 
(indicating  the  lowest  risk)  and  the  equity  tranche  receives  the  highest  expected  return 
at  15%  (indicating  the  highest  risk).  The  high  return  on  the  equity  tranche  reflects  its 
significantly  higher  risk  because  this  segment  is  less  likely  to  receive  its  indicative  return 
than  the  other  segments.  This  is  because  cash  flows  are  paid  out  based  on  a “waterfall” 
structure  under  which  both  interest  and  principal  payments  are  first  allocated  to  the  senior 
tranche  until  all  of  its  promised  interest  and  outstanding  principal  is  paid  off.  Once  the 
senior  tranche  is  paid  off,  interest  and  principal  payments  are  then  made  to  the  mezzanine 
tranche,  and  only  once  the  mezzanine  tranche  receives  all  of  its  promised  cash  flows  are  any 
residual  cash  flows  allocated  to  the  equity  tranche. 

From  a risk  perspective , the  equity  tranche  has  the  highest  risk,  and  in  our  example  will 
absorb  the  first  5%  of  losses  ($20  million  of  the  $400  million).  The  mezzanine  tranche  will 
absorb  the  next  20%  of  losses.  Therefore,  these  two  tranches  together  absorb  25%  of  losses. 
If  losses  exceed  25%,  the  equity  and  mezzanine  tranches  lose  their  entire  principal,  and  any 
incremental  loss  will  be  absorbed  by  the  senior  tranche. 
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From  a ratings  perspective , the  senior  tranche  typically  receives  an  AAA  rating  (highest 
possible  rating)  given  its  low  risk.  The  mezzanine  tranche  is  typically  rated  BBB  given  its 
moderate  risk,  while  the  equity  tranche  is  generally  not  rated.  Assigning  a rating  was  often 
a negotiated  process  between  the  ABS  creator  and  the  rating  agencies,  and  the  ABS  creator 
would  present  several  structures  to  the  rating  agencies  for  evaluation. 

ABS  Collateralized  Debt  Obligations 

A collateralized  debt  obligation  (CDO)  is  a type  of  asset-backed  security  where  the 
underlying  assets  are  fixed-income  securities,  including  mortgages.  In  an  ABS  structure, 
finding  investors  for  the  AAA-rated  senior  tranches  from  underlying  subprime  mortgages 
pools  was  not  challenging  given  its  top  rating.  In  addition,  the  originators  of  mortgages 
typically  retained  the  equity  tranche.  The  difficulty  lay  in  finding  willing  investors  for  the 
mezzanine  tranches.  As  a result,  firms  became  creative  and,  through  financial  engineering, 
created  ABS  CDOs. 

Before  the  credit  crisis  hit,  an  ABS  CDO  was  created  from  the  mezzanine  tranche  of  an 
ABS  that  was  backed  by  subprime  mortgages.  The  new  ABS  CDO  was  then  also  segmented 
into  tranches  the  same  way  as  the  original  ABS,  with  a senior,  mezzanine,  and  an  equity 
tranche.  If  we  assume  the  same  principal  allocation  to  the  tranches  as  in  our  earlier  example 
(75/20/5),  it  is  important  to  understand  the  outcome  of  this  financial  engineering:  whereas 
the  original  ABS  had  a total  of  75%  in  the  AAA-rated  senior  instruments,  the  new  ABS 
CDO  was  90%  AAA-rated  (75%  in  the  ABS  plus  an  additional  15%  = 75%  of  20%).  If  we 
repeat  this  process  multiple  times,  a pool  of  underlying  high-risk  subprime  mortgages  could 
be  turned  into  investments  that  were  almost  entirely  AAA-rated. 

Of  course,  ABS  and  ABS  CDO  investments  did  not  all  contain  exactly  three  tranches,  and 
could  have  their  cash  flows  segmented  for  each  rating  category  (AAA,  AA+,  AA,  AA-,  and 
so  on).  Riskier  segments  were  often  subject  to  overcollateralization,  which  means  they  were 
backed  by  mortgages  worth  more  than  100%  of  the  principal  value  of  the  investment. 

From  a risk  perspective , the  senior  tranche  of  the  ABS  CDO  was  significantly  riskier  than 
the  senior  tranche  of  the  original  ABS.  In  the  ABS  CDO,  any  losses  in  excess  of  25%  would 
accrue  to  the  senior  ABS  CDO  tranche.  Because  the  new  ABS  CDO  was  created  entirely 
from  the  original  ABS  mezzanine  tranche,  the  25%  loss  in  the  ABS  CDO  represented  a 5% 
mezzanine  loss  in  the  ABS  (25%  of  20%).  This  meant  that  any  losses  in  excess  of  10%  of 
the  overall  pool  of  mortgages  would  accrue  to  the  ABS  CDO  senior  tranche  investors. 

The  conclusion  from  this  discussion  is  that  the  more  removed  a new  structured  investment 
is  from  the  original  investment,  the  riskier  the  tranches,  especially  the  senior  tranche, 
despite  all  senior  tranches  having  been  assigned  a very  high  rating  (e.g.,  AAA).  However, 
assigning  the  same  rating  to  investments  that  differed  by  risk  misstated  the  true  risk  of  the 
investments.  This  was  a problem  as  investors  often  compared  the  ABS  ratings  to  identical 
bond  ratings.  For  example,  if  a BBB-rated  bond  yielded  8%  while  a BBB-rated  ABS  yielded 
9%,  investors  would  have  preferred  the  higher  yielding,  but  equivalently  rated  investment, 
and  would  have  potentially  ignored  the  difference  in  risks. 

Another  risk  issue  to  consider  is  that  during  periods  of  crisis,  correlations  between  assets  and 
asset  classes  often  increase.  This  was  observed  during  the  financial  crisis  as  well,  and  with 
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increased  default  correlations,  the  risk  of  the  higher-risk  ABS  and  ABS  CDO  investments 
also  increased  compared  to  traditional  investments  such  as  bonds. 

ABSs,  ABS  CDOs,  and  the  Credit  Crisis 

As  mortgage  defaults  began  to  climb  during  the  credit  crisis,  principal  and  interest  cash 
flows  on  ABSs  and  ABS  CDOs  began  to  decline,  leading  to  losses  for  investors  in  these 
investment  vehicles.  As  the  quality  of  mortgages  declined,  rating  agencies  downgraded  ABSs 
and  ABS  CDOs,  and  the  market  for  tranches  of  these  investments  became  illiquid.  Investors 
who  relied  on  the  ratings  provided  by  the  rating  agencies  for  these  complex  products  now 
suffered  losses  and  could  often  only  receive  pennies  on  the  dollar  at  best.  As  investors 
became  reluctant  to  invest  in  higher-risk  investments,  the  market  experienced  a flight  to 
quality  to  safe  haven  Treasury  instruments.  As  the  price  of  Treasuries  increased  and  the  price 
of  structured  investments  decreased,  credit  spreads  widened. 

Many  financial  institutions  did  not  escape  the  credit  crisis  unscathed.  Banks  including 
Citigroup,  Merrill  Lynch,  and  UBS  experienced  large  losses,  while  other  entities  had  to 
be  bailed  out  by  governments,  or,  as  in  the  case  of  Lehman  Brothers,  were  allowed  to  fail. 

Following  the  crisis,  government  and  regulatory  oversight  of  financial  institutions  increased 
under  legislations  such  as  the  Dodd-Frank  Act. 

The  Roles  of  Incentives  and  Regulatory  Arbitrage 


LO  7.3:  Explain  the  roles  of  incentives  and  regulatory  arbitrage  in  the  outcome  of 
the  crisis. 


There  is  no  singular  cause  of  the  credit  crisis;  instead,  many  factors  contributed  to  it. 

First,  human  psychology  played  a role.  Mortgage  originators,  securitized  asset  creators, 
and  investors  all  assumed  that  home  prices  would  continue  to  increase  indefinitely  even 
though  this  belief  was  not  supported  by  economic  fundamentals.  This  behavior  is  known  as 
irrational  exuberance.  Second,  relaxed  lending  standards  allowed  investors  with  weak  credit 
to  qualify  for  subprime  mortgages.  Third,  these  subprime  mortgages  were  then  securitized 
into  ABSs  and  ABS  CDOs,  which  were  then  rated  by  rating  agencies.  However,  the  rating 
agencies  had  little  experience  in  rating  complex  structured  investments  and,  as  a result, 
materially  underestimated  the  risks  of  these  products. 

Incentives 

Incentives  describe  the  differing  motivations  of  players  in  structured  product  creation. 

When  incentives  do  not  align,  it  is  known  as  an  agency  cost. 

The  incentive  of  mortgage  originators  was  to  create  loans  acceptable  for  inclusion  as  assets 
in  the  ABS  and  ABS  CDO  tranches.  The  incentive  of  those  valuing  homes  was  to  provide 
the  highest  possible  valuation.  This  was  favorable  to  lenders  who  were,  therefore,  more 
motivated  to  transfer  additional  business  to  those  valuing  homes.  By  contrast,  the  incentives 
of  the  creators  of  ABSs  and  ABS  CDOs  were  driven  by  profitability  in  the  form  of  excess 
cash  inflow  from  these  investments  over  cash  outflows.  They  also  sought  to  maximize  the 
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volume  of  AAA-rated  tranches  (easiest  to  sell)  by  using  their  knowledge  of  rating  criteria  by 
rating  agencies.  Rating  agencies  were  paid  for  their  ratings  and  were  incentivized  by  issuing 
(favorable)  recommendations  on  these  products. 

Employee  compensation  arrangements  contributed  to  another  form  of  agency  cost  and 
incentives.  Compensation  has  three  components:  salary,  bonus,  and  stock  options.  Traders 
often  received  the  bulk  of  their  compensation  in  year-end  (or  intra-year)  bonuses,  which 
were  short-term  incentives  that  often  rewarded  short-term  risky  behavior.  For  example,  a 
trader  who  correctly  foresaw  that  the  housing  bubble  would  burst  in  2007  (and  should, 
therefore,  have  stopped  trading  risky  securitized  products)  was  still  better  off  trading  in 
2006  and  collecting  a bonus  for  the  year. 

Regulatory  Arbitrage 

Regulatory  arbitrage  refers  to  the  scenario  where  the  banks  that  originated,  securitized, 
and  sold  their  mortgages  were  also  the  investors  in  these  securitized  assets.  The  banks’ 
primary  motivation  for  their  strategy  was  accounting  driven  and  specifically  related  to 
capital  requirements.  Under  capital  requirement  rules,  banks  had  to  keep  mortgages  in  the 
“banking  book,”  whereas  the  tranches  of  securitized  assets  were  kept  in  the  “trading  book.” 
Capital  requirements  for  these  two  books  were  very  different  (note  that  the  specific  capital 
requirement  and  accounting  treatment  is  beyond  the  scope  of  this  topic). 

Lessons  Learned 


LO  7.4:  Apply  the  key  lessons  learned  by  risk  managers  to  the  scenarios  provided. 


The  credit  crisis  yielded  the  following  eight  key  lessons: 

1.  Human  psychology  plays  a role  in  financial  markets.  Risk  managers  should  look  for 
evidence  of  irrational  exuberance  and  never  assume  that  bull  markets  will  continue 
indefinitely. 

2.  Traditional  correlations  can  break  down  during  periods  of  crisis,  and  default 
correlations  can  increase.  Investors  should  not  estimate  correlations  from  normal 
market  conditions. 

3.  As  default  rates  increase  in  stressed  markets,  recovery  rates  decline.  Investors  should  not 
estimate  recovery  rates  from  normal  market  conditions. 

4.  Traders’  compensation  arrangements  including  bonuses  should  be  aligned  with  the 
interests  of  their  employers.  Bonuses  should  be  spread  out  over  several  years,  with 

a clawback  provision  to  pay  back  part  of  the  bonus  if  a year  of  good  performance  is 
followed  by  a year  of  bad  performance. 

5.  Investments  that  initially  appear  to  be  good  investments  may  be  poor  investments  after 
further  scrutiny.  AAA-rated  senior  tranches  of  ABSs  typically  offered  higher  return  than 
AAA-rated  bonds.  The  difference  in  returns  was  due  to  the  higher  risk  that  the  ABS 
carried. 
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6.  Investors  should  conduct  their  own  analyses  rather  than  solely  rely  on  ratings  provided 
by  rating  agencies. 

7.  Transparency  is  crucial  in  financial  markets.  A lack  of  transparency  in  markets  can  cause 
liquidity  to  dry  up  during  stressed  periods. 

8.  Resecuritization  (i.e.,  using  an  investment  from  a previous  round  of  securitization 
to  create  a new  set  of  investments)  results  in  investments  that  have  risks  that  tend  to 
exceed  their  expected  returns. 
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Key  Concepts 


LO  7.1 

One  of  the  key  causes  of  the  credit  crisis  of  2007  was  the  relaxation  of  lending  standards 
by  mortgage  lenders  to  attract  new  entrants  into  the  market.  Another  cause  was  a lack  of 
government  regulation.  Relaxed  lending  standards  and  the  lack  of  adequate  government 
regulation  encouraged  predatory  lending. 

By  the  second  half  of  2006,  many  borrowers  could  no  longer  afford  their  mortgages. 

Lenders  were  forced  to  foreclose,  putting  downward  pressure  on  demand  and  home  prices 
and  increasing  supply,  which  put  further  price  pressure  on  homes. 

Given  that  mortgages  were  nonrecourse  in  many  states,  borrowers  had  no  financial  liability 
beyond  their  mortgage.  The  economically  optional  decision  for  borrowers  who  had  negative 
equity  in  their  homes  was  to  sell  their  home  to  the  lender  at  the  price  of  the  outstanding 
mortgage. 


LO  7.2 

Securitization  is  the  process  of  repackaging  a pool  of  mortgages  into  financial  investments 
that  are  then  sold  to  investors. 

An  asset-backed  security  (ABS)  is  a financial  security  created  through  securitization  from 
the  cash  flows  of  financial  assets.  The  cash  flows  are  allocated  to  different  tranches  based 
on  the  priority  of  cash  flows,  including  senior,  mezzanine,  and  equity  tranches.  The  least 
risky  segment  is  the  senior  tranche,  which  receives  the  highest  rating  (often  AAA)  and  has 
the  lowest  default  risk.  The  highest  risk  segment  is  the  equity  tranche,  which  is  typically 
unrated  and  retained  by  the  ABS  creator  and  has  the  highest  default  risk.  Cash  flows  are 
paid  out  based  on  a “waterfall”  structure,  under  which  interest  and  principal  payments  are 
allocated  to  tranches  based  on  seniority. 

An  ABS  CDO  could  be  created  from  the  mezzanine  tranche  of  an  ABS  backed  by  a pool  of 
subprime  mortgages.  The  new  ABS  CDO  could  also  be  segmented  into  tranches.  However, 
the  senior  tranche  of  the  ABS  CDO  is  riskier  than  the  senior  tranche  of  the  ABS. 

As  mortgage  defaults  began  to  climb  during  the  credit  crisis,  cash  flows  on  ABSs  and  ABS 
CDOs  began  to  decline,  leading  to  losses  for  investors  in  those  investment  vehicles. 


LO  7.3 

Factors  that  contributed  to  the  credit  crisis  included  irrational  exuberance,  relaxed  lending 
standards,  and  the  lack  of  experience  by  rating  agencies  in  rating  complex  structured 
investments. 

Each  participant  (mortgage  originators,  individuals  valuing  homes,  the  creators  of 
structured  investments,  rating  agencies,  and  investors)  in  the  creation  of  a structured 
product  has  different  motivations/incentives.  Agency  costs  occur  when  these  incentives  do 
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not  align.  Employee  compensation  arrangements,  which  often  reward  riskier  short-term 
behavior,  also  result  in  agency  costs. 

Regulatory  arbitrage  refers  to  the  scenario  where  the  banks  that  originated,  securitized,  and 
sold  their  mortgages  were  also  the  investors  in  these  securitized  assets.  The  motivation  for 
banks  was  driven  by  differing  capital  requirements  for  mortgages  and  investment  tranches. 


LO  7.4 

The  credit  crisis  yielded  several  key  lessons: 

• Risk  managers  should  be  aware  of  potential  irrational  exuberance  in  the  markets. 

• Correlations  can  increase  during  periods  of  stress. 

• Investors  should  not  estimate  recovery  rates  from  normal  market  conditions. 

• Traders’  compensation  arrangements  should  reflect  prudent  practices. 

• The  risk  differential  between  bonds  and  ABS  should  be  considered  by  ratings  agencies. 

• Analysts  should  conduct  their  own  risk  analyses  when  evaluating  ABS. 

• Transparency  is  important  for  a well-functioning  financial  market. 

• Investments  from  resecuritization  are  excessively  risky. 
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Concept  Checkers 


1 . A bank  recently  created  an  asset-backed  security  (ABS)  from  its  pool  of  subprime 
mortgages.  Subsequently,  the  bank  created  a collateralized  debt  obligation  (ABS 
CDO)  from  the  mezzanine  tranche  of  the  ABS.  Each  structured  security  has  a 
senior,  mezzanine,  and  equity  tranche.  The  senior  tranche  of  the  ABS  CDO  has: 

A.  lower  risk  than  the  equity  tranche  of  the  ABS  CDO  but  higher  risk  than  the 
mezzanine  tranche  of  the  ABS. 

B.  equivalent  risk  to  the  senior  tranche  of  the  ABS  but  lower  risk  than  the 
mezzanine  tranche  of  the  ABS  CDO. 

C.  lower  risk  than  the  equity  tranches  of  both  the  ABS  and  ABS  CDO. 

D.  lower  risk  than  both  the  equity  and  mezzanine  tranches  of  the  ABS. 

2.  The  terms  “liar  loans”  and  “NINJA  borrowers”  are  typically  associated  with  which  of 
the  following  concepts? 

A.  Teaser  rates. 

B.  Overcollateralization  of  mortgage  loans. 

C.  Irrational  exuberance. 

D.  Relaxed  lending  standards. 

3.  Which  of  the  following  statements  about  asset-backed  securities  (ABSs)  is  least 
accurate? 

A.  The  waterfall  structure  of  an  ABS  alters  the  priority  of  principal  and  interest 
cash  flows. 

B.  The  highest  expected  return,  lowest-risk  tranche  is  the  senior  tranche. 

C.  A 3%  overcollateralization  indicates  that  for  every  $100  in  an  ABS  created,  $103 
in  underlying  mortgages  is  required. 

D.  The  total  cash  flow  of  the  underlying  mortgages  and  the  total  cash  flow  of  the 
ABS  are  the  same. 

4.  Anna  Panich  is  a fixed-income  analyst  currently  evaluating  structured  mortgage 
products.  She  believes  that  the  incentives  of  mortgage  originators  differ  from  the 
incentives  of  the  creators  of  asset-backed  securities.  Which  of  the  following  terms  is 
most  likely  associated  with  these  different  incentives? 

A.  Securitization. 

B.  Irrational  exuberance. 

C.  Regulatory  arbitrage. 

D.  Agency  costs. 

5.  The  senior  tranche  of  a 10-year,  asset-backed  security  collateralized  debt  obligation 
(ABS  CDO)  is  rated  AAA.  Given  that  a comparable  10-year  bond  is  also  rated  AAA, 
which  of  the  following  statements  is  least  accurate? 

A.  There  is  likely  considerable  irrational  exuberance  in  the  markets. 

B.  The  rating  agencies  did  not  fully  consider  all  of  the  ABS  CDO’s  risks. 

C.  The  probability  of  loss  of  the  ABS  CDO  is  lower  than  the  probability  of  loss  of 
the  bond. 

D.  The  AAA-rated  senior  tranche  is  less  risky  than  the  equity  tranche  of  the  same 
ABS  CDO. 
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Concept  Checker  Answers 


1 . C Since  the  ABS  CDO  has  been  created  from  the  mezzanine  tranche  of  the  ABS,  all  tranches  of 

the  ABS  CDO  have  lower  risk  than  the  equity  tranche  and  have  higher  risk  than  the  senior 
tranche  of  the  ABS.  The  senior  tranche  of  the  ABS  CDO  also  has  lower  risk  than  both  the 
mezzanine  and  equity  tranches  of  the  same  ABS  CDO. 

2.  D “Liar  loans”  (loans  where  borrowers  lied  on  their  mortgage  loan  applications)  and  "NINJA 

borrowers”  (mortgage  borrowers  with  no  income,  no  job,  and  no  assets)  are  associated  with 
relaxed  lending  standards  and  are  viewed  as  two  of  the  contributing  factors  to  the  housing 
crisis. 

3.  B The  senior  tranche  is  the  lowest-risk  tranche  but  also  is  the  lowest  expected  return  tranche 

(the  equity  tranche  has  the  highest  risk  but  offers  the  highest  expected  return).  All  other 
statements  are  accurate. 

4.  D Incentives  indicate  the  motivations  of  players  in  the  structured  product  creation,  including 

the  mortgage  originator,  individuals  valuing  homes,  the  creator  of  structured  investments, 
rating  agencies,  and  the  investor.  When  these  incentives  do  not  align,  agency  costs  are 
incurred. 

3.  C The  probability  of  loss  of  the  ABS  CDO  is  higher  than  the  probability  of  loss  of  the  bond 
because  the  ABS  CDO  carries  additional  risks  including  mortgage  prepayment  risk  and 
subordination  risk  to  the  senior  tranche  of  the  ABS  (because  the  ABS  CDO  is  created  from 
the  mezzanine  tranche  of  an  ABS). 

When  there  is  considerable  irrational  exuberance  in  the  markets,  observers  may  ignore 
the  warning  signs  in  the  housing  market,  assume  that  the  status  quo  holds  and,  therefore, 
incorrectly  view  the  risks  of  the  ABS  CDO  and  the  bond  as  the  same.  It  is  also  correct 
that  rating  agencies  did  not  fully  consider  all  of  the  ABS  CDO’s  risks  in  their  ratings  and, 
as  a result,  assigned  AAA  ratings  to  the  senior  tranches  of  ABS  CDOs  even  though  these 
securities  carry  higher  risk  than  comparable  nonsecuritized  products. 

The  AAA-rated  senior  tranche  is  less  risky  than  both  the  mezzanine  and  equity  tranches  of 
the  same  ABS  CDO. 
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Risk  Management  Failures:  What  Are 
They  and  When  Do  They  Happen? 


Topic  8 

Exam  Focus 

Risk  management  failures  result  from  not  correctly  recognizing,  measuring,  and/or 
monitoring  risks  as  well  as  not  appropriately  communicating  these  risks  to  top  management. 
Mismeasurement  of  risk  can  result  from  not  recognizing  how  return  distributions  change, 
using  subjective  inputs  concerning  rare  events,  and  failing  to  take  all  risks  into  account.  For 
the  exam,  understand  the  use  of  value  at  risk  (VaR)  as  a risk  metric.  VaR  is  a very  useful  tool 
for  measuring  and  monitoring  market,  credit,  and  operational  risk. 


The  Role  of  Risk  Management 


LO  8.1:  Define  the  role  of  risk  management  and  defend  the  position  that  a large 
financial  loss  is  not  necessarily  a failure  of  risk  management. 


The  role  of  risk  management  involves  performing  the  following  tasks. 

• Assess  all  risks  faced  by  the  firm. 

• Communicate  these  risks  to  risk-taking  decision  makers. 

• Monitor  and  manage  these  risks  (make  sure  that  the  firm  only  takes  the  necessary 
amount  of  risk). 

The  risk  management  process  focuses  on  the  output  of  a particular  risk  metric  [e.g.,  the 
value  at  risk  (VaR)  for  the  firm]  and  attempts  to  keep  the  measure  at  a specified  target 
amount.  When  a given  risk  measure  is  above  (below)  the  chosen  target  amount,  the  firm 
should  decrease  (increase)  risk.  The  risk  management  process  usually  evaluates  several  risk 
metrics  (e.g.,  duration,  beta). 

A large  loss  is  not  necessarily  an  indication  of  a risk  management  failure.  As  long  as  risk 
managers  understood  and  prepared  for  the  possibility  of  loss,  then  the  implemented  risk 
management  was  successful.  With  that  said,  the  main  objective  of  risk  management  should 
not  be  to  prevent  losses.  However,  risk  management  should  recognize  that  large  losses  are 
possible  and  develop  contingency  plans  that  deal  with  such  losses  if  they  should  occur. 
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LO  8.2:  Analyze  instances  of  risk  management  failure. 
LO  8.3:  Assess  the  impact  of  error  in  risk  measurement. 


The  process  of  risk  management  can  fail  if  one  or  more  of  the  following  events  occur. 

• Not  measuring  known  risks  correctly. 

• Not  recognizing  some  risks. 

• Not  communicating  risks  to  top  management. 

• Not  monitoring  risk  adequately. 

• Not  managing  risk  adequately. 

• Not  using  the  appropriate  risk  metrics. 

It  is  important  for  the  firm  to  recognize  all  relevant  risks  and  to  measure  all  known  risks 
correctly  These  risks  need  to  be  managed  and  monitored  using  the  appropriate  risk  metrics, 
and  the  results  need  to  be  properly  communicated  to  top  management. 

Risk  mismeasurement  can  occur  when  risk  managers  do  not  understand  the  distribution 
of  returns  of  a single  risky  position  or  the  relationships  of  the  distributions  among  different 
positions.  Understanding  the  distribution  of  a given  position  means  being  able  to  identify 
the  underlying  return  distribution  and  the  probabilities  associated  with  that  particular 
distribution.  Understanding  the  relationships  among  return  distributions  means  being  able 
to  identify  how  risky  positions  are  correlated.  In  both  cases,  it  is  crucial  to  understand  the 
degree  to  which  return  distributions  and/or  correlations  can  change  over  time.  It  is  well 
known,  for  example,  that  correlations  tend  to  increase  during  times  of  stress. 

One  of  the  key  issues  for  risk  managers  is  the  occurrence  of  extreme  events  (those  events 
which  occur  with  low  frequency  but  high  severity).  Estimates  of  these  rare  events  require  a 
degree  of  subjectivity,  which  clearly  has  the  potential  for  mismeasurement.  Unfortunately 
firm  politics  can  play  a role  in  reducing  the  accuracy  of  risk  estimates  since  some 
departments  may  wish  to  understate  risks  by  using  subjective  measures.  Mismeasurement 
can  also  occur  from  ignoring  relevant  risks  as  discussed  in  the  following  LO. 


LO  8.4:  Explain  how  a firm  can  fail  to  take  known  and  unknown  risk s into  account 
in  making  strategic  decisions. 


Failing  to  take  known  and  unknown  risks  into  account  (i.e.,  ignoring  risks)  can  take  three 
forms: 

1.  Ignoring  a risk  that  is  known. 

2.  Knowing  about  a risk,  but  failing  to  properly  incorporate  it  into  risk  models. 

3.  Failing  to  discover  all  risks. 

A firm  ignores  known  risks  by  failing  to  realize  how  various  position  risks  can  lead  to  a 
potential  disaster.  This  was  the  case  when  Long-Term  Capital  Management  (LTCM)  failed 
to  recognize  that  high-yielding  Russian  debt  had  not  only  default  risk,  but  also  currency 
risk,  sovereign  risk,  and  counterparty  risk.  For  example,  the  managers  of  LTCM  had 
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thought  they  had  hedged  currency  risk  by  selling  rubles  forward,  but  the  Russian  banks  on 
the  other  sides  of  the  transactions  failed  during  the  1998  Russian  crisis. 

Not  collecting  and  entering  data  into  the  appropriate  risk  models  is  another  potential  source 
of  disaster.  In  this  case,  the  firm  may  make  an  attempt  to  recognize  the  risk.  However,  not 
obtaining  proper  data  to  measure  the  risk  adequately  will  have  similar  consequences  to 
ignoring  risks. 

One  of  the  severe  consequences  of  either  ignoring  or  not  adequately  using  data  in  risk 
models  is  that  the  firm  might  expand  its  operations  in  areas  where  risks  are  not  being 
properly  accounted  for.  For  example,  consider  a particular  trading  office  within  a firm 
where  the  firm  has  made  a risk  allocation  to  the  office,  but  then  the  firm  ignores  the  data 
generated  by  this  trading  office  and  does  not  monitor  to  see  if  allocation  adjustments  are 
needed.  Another  example  is  blindly  accepting  a given  assumption  (i.e.,  AAA-rated  assets  are 
very  low  risk)  and  ignoring  data  that  would  indicate  the  contrary. 

Another  risk  that  is  often  ignored  is  increasing  correlations  during  a time  of  crisis.  Not 
recognizing  the  possibility  of  increasing  correlations  could  potentially  lead  to  large  losses. 
Consider,  for  example,  the  correlation  between  credit  risk  and  market  risk  for  banks. 

In  the  recent  credit  crisis,  market  risk  caused  decreases  in  security  values  issued  through 
securitization,  and  credit  risk  caused  decreases  in  the  utilization  of  securitization.  The 
important  point  is  that  firms  must  use  all  available  data  to  adequately  measure  all  risks  and 
relationships  among  risks. 

Some  risks  may  go  completely  undetected  by  risk  managers.  Clearly,  the  same  unfavorable 
outcomes  discussed  previously  would  result.  In  some  cases,  however,  unknown  risks  may 
not  be  too  severe  of  a problem.  There  are  ultra-extreme  events  (e.g.,  asteroid  crashing  to 
earth)  where  the  probability  is  so  low  and  the  outcome  is  so  horrific  that  exploring  it  would 
not  be  worthwhile.  Also,  the  nature  of  some  risks  can  be  unknown  while  their  consequences 
are  known.  For  example,  simply  knowing  that  a given  random  variable  follows  a normal 
distribution  may  be  adequate.  Furthermore,  as  long  as  management  realizes  that  not  all  risks 
will  be  known  and  makes  appropriate  capital  allocations  to  account  for  this,  then  unknown 
risks  may  not  be  a severe  problem. 


Properly  Communicating  Risks 


LO  8.5:  Justify  the  importance  of  communication  in  effective  risk  management. 


The  purpose  of  risk  management  is  to  allow  senior  managers  of  the  firm  to  make  the 
optimal  strategic  decisions  to  maximize  firm  value.  Thus,  risk  management  efforts  are 
wasted  unless  the  results  can  be  effectively  communicated  to  the  appropriate  decision 
makers.  This  includes  timely  communication  that  has  not  been  distorted  by  intermediaries. 
Furthermore,  the  risk  management  process  may  be  harmful  if  there  is  miscommunication, 
and  the  senior  managers  get  a false  sense  of  security  from  the  information  that  is  provided. 
The  bottom  line  is  this — it  is  very  important  to  communicate  the  results  of  the  risk 
management  process  effectively. 
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LO  8.6:  Describe  how  firms  can  fail  to  correctly  monitor  and  manage  risk  on  an 
ongoing  basis. 


Risk  managers  must  recognize  how  portfolio  risk  profiles  can  change  even  during  the 
absence  of  trading.  The  properties  of  some  securities  can  change  for  several  reasons  (e.g., 
changes  in  interest  rates,  embedded  derivatives).  Also,  some  securities  can  have  complex 
relationships  with  market  variables;  for  example,  a security  may  increase  in  value  when 
interest  rates  decline  over  one  particular  range  and  then  decline  in  value  as  interest  rates 
decline  further  outside  of  that  range. 

The  pricing  of  subprime  derivatives  serves  as  an  example  of  changing  risk  exposures. 
Previously,  the  ABX  indices  (i.e.,  asset-backed  securities  indices)  showed  no  variation  for 
AAA-rated  tranches  of  securitization.  However,  during  the  recent  financial  crisis,  the  values 
declined  suddenly  and  dramatically,  and  anyone  who  had  relied  on  historical  values  of  the 
ABX  indices  for  allocations  incurred  large  losses.  Obviously,  a key  element  for  successful 
risk  management  is  to  recognize  how  quickly  and  dramatically  risk  characteristics  can 
change.  Thus,  it  is  important  to  be  able  to  respond  quickly  and  have  contingency  plans  if / 
when  needed. 

It  is  also  important  to  understand  that  the  act  of  monitoring  and  managing  risk  can  change 
the  nature  of  risk.  The  Heisenberg  Principle  says  that  increasing  the  certainty  for  one 
variable  may  introduce  uncertainty  for  another  variable.  Marking  to  market  in  one  firm,  for 
example,  may  start  a chain  reaction  of  adjustments  in  other  firms  which  changes  the  risk 
characteristics  of  those  firms  and  the  overall  market,  thus,  increasing  market  risk. 

Another  cautionary  note  concerning  monitoring  and  managing  risk  too  carefully  is  that 
it  could  stifle  a trading  departments  innovation.  Employees  should  have  some  degree  of 
flexibility;  therefore,  a firm’s  management  may  rightly  decide  not  to,  or  “fail”  to,  monitor 
and  manage  some  risks  on  an  ongoing  basis.  The  downside  of  course  is  that  this  flexibility 
could  make  it  possible  for  risks  to  emerge  in  remote  corners  of  the  firm.  This  is  one  of  the 
many  trade-offs  senior  management  must  consider. 

Firms  can  fail  to  monitor  and  manage  risk  on  an  ongoing  basis  by  not  having  an  adequate 
incentive  structure  and/or  culture  that  promotes  effective  risk  management.  If  risk  is 
everyone’s  concern,  then  unobserved  risks  are  less  likely.  In  addition,  if  compensation  is  a 
function  of  risk,  then  employees  will  likely  take  more  interest  in  lowering  firm  risk. 


The  Role  of  Risk  Metrics 


LO  8.7:  Evaluate  the  role  of  risk  metrics  and  analyze  the  shortcomings  of  existing 
risk  metrics. 


Risk  metrics  aid  the  management  process  by  providing  managers  a target  to  achieve  (e.g., 
a particular  VaR  level).  Monitoring  these  risk  metrics  allows  managers  to  appropriately 
manage  risk.  However,  risk  metrics  may  be  too  narrow  in  scope,  which  can  make  it  more 
difficult  to  achieve  the  overall  objective  of  managing  risk  in  an  effort  to  create  value. 
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VaR  is  a widely  used  risk  metric  that  is  narrow  in  scope  in  several  ways.  Usually,  a firm 
simply  reports  the  number  of  times  losses  exceeded  VaR  in  a given  period.  Over  a year,  a 
firm  may  have  zero  daily  losses  greater  than  daily  VaR,  but  it  could  end  up  with  an  annual 
loss  in  the  event  that  most  days  incurred  losses  (without  exceeding  VaR).  Furthermore,  for  a 
firm  that  exceeds  its  VaR  for  a certain  number  of  days,  the  VaR  approach  does  not  indicate 
the  size  of  those  losses.  It  is  well  known  that  VaR  does  not  capture  the  implications  of 
extremely  large  losses  that  have  a very  low  probability  of  occurring. 

One  misuse  of  VaR  is  choosing  a time  period  (e.g.,  daily  or  weekly)  that  does  not 
correspond  to  the  liquidity  of  the  assets  in  the  portfolio.  Using  daily  VaR  on  a portfolio 
where  the  assets  cannot  be  effectively  traded  within  a day  is  clearly  not  appropriate.  Taking 
a longer  term  horizon  to  account  for  liquidity  of  the  assets  may  not  be  sufficient  either.  The 
problem  is  that  any  given  horizon,  such  as  a month  or  a year,  may  have  a low  probability 
of  default  because  the  probability  of  a crisis  in  these  intermediate  horizons  is  very  low. 
Financial  institutions  generally  focus  on  firm-wide  risk  management  at  a one-year  horizon 
and  try  to  achieve  credit  ratings  that  imply  a low  probability  of  default  for  that  horizon. 
However,  without  looking  ahead  multiple  periods,  the  firm  has  little  incentive  to  factor  in 
a potential  crisis,  which  would  drastically  change  default  probabilities.  The  firm  needs  a 
strategy  to  survive  those  unfortunate  years  where  crises  do  occur,  which  means  that  focusing 
on  only  a one-year  horizon  will  likely  fall  short. 

VaR  also  assumes  the  distributions  of  losses  are  not  correlated  over  time.  In  the  recent 
financial  crisis,  huge  losses  on  one  day  led  to  drastic  falls  in  liquidity,  which  led  to  large 
losses  on  the  following  day.  The  fact  is  that  a crisis  can  change  the  nature  of  a return 
distribution  for  a given  period  as  well  as  across  periods. 

Aiiother  complication  is  that  a given  firms  losses  can  exacerbate  the  risk  in  the  overall 
market.  This  is  related  to  an  earlier  discussion  on  how  the  marking  to  market  of  one  firm 
can  lead  to  adjustments  in  other  firms.  The  point  is  that  a firm  with  large  losses  in  a given 
market  can  influence  the  activity  in  that  market.  This  firm  can  also  fall  victim  to  predatory 
trading.  Predatory  trading  occurs  when  other  firms  in  a market  see  that  a large  player  in  the 
market  is  in  trouble  and  the  other  firms  attempt  to  push  the  price  down  further  in  order  to 
hurt  the  large  player.  Such  activity  is  difficult  to  incorporate  into  risk  metrics. 

In  its  risk  management  process,  a firm  can  attempt  to  capture  such  complications  with 
scenario  analysis.  The  scenarios  would  include  a crises  and/or  a firm’s  behavior  in  the  overall 
market.  Scenario  analysis  requires  input  from  people  who  have  a solid  understanding  of  not 
only  mathematics,  but  also  the  complexities  of  human  behavior. 
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Key  Concepts 


LO  8.1 

Risk  management  involves  assessing,  communicating,  monitoring,  and  managing  risks. 

A large  loss  does  not  necessarily  mean  that  risk  management  has  failed.  Losses  are  the  result 
of  risk  taking,  which  is  required  for  value  creation. 


LO  8.2 

Risk  management  can  fail  if  the  firm  does  not  do  the  following:  measure  risks  correctly, 
recognize  some  risk,  communicate  risks  to  top  management,  monitor  and  manage  risks,  and 
use  appropriate  metrics. 


LO  8.3 

Mismeasurement  can  occur  when  management  does  not  understand  the  distribution  of 
returns  of  a single  position  or  the  relationships  of  the  distributions  among  positions  and 
how  the  distributions  and  correlations  can  change  over  time. 

Mismeasurement  can  also  occur  when  managers  must  use  subjective  probabilities  for  rare 
and  extreme  events.  The  subjective  probabilities  can  be  biased  from  firm  politics. 


LO  8.4 

Failing  to  take  known  and  unknown  risks  into  account  can  take  three  forms: 

(1)  ignore  a risk  that  is  known,  (2)  failure  to  incorporate  a risk  into  risk  models,  and  (3)  not 
finding  all  risks.  All  three  of  these  are  variations  of  the  same  concept  and  can  have  similar 
results  (e.g.,  failure  to  measure  overall  risk  or  expanding  operations  to  areas  where  risk  is  not 
being  properly  measured). 


LO  8.3 

Senior  managers  must  understand  the  results  of  risk  management  in  order  for  it  to  be 
meaningful.  Unless  senior  managers  have  the  correct  information  to  make  decisions,  risk 
management  is  pointless. 


LO  8.6 

Risk  managers  must  recognize  how  risk  characteristics  change  over  time.  Many  securities 
have  complex  relationships  with  market  variables. 

Having  an  adequate  incentive  structure  and  firm-wide  culture  can  help  with  the  risk 
monitoring  and  managing  process. 
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LO  8.7 

Risk  metrics  such  as  VaR  are  usually  too  narrow  in  scope.  For  example,  VaR  usually  assumes 
independent  losses  across  periods  of  time. 

Risk  metrics  generally  fail  to  capture  the  effect  of  a firm  s actions  on  the  overall  market  and 
behavior  patterns  such  as  predatory  trading. 
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Concept  Checkers 


1 . Which  of  the  following  is  not  part  of  the  risk  management  process? 

A.  Monitoring  risk. 

B.  Assessing  the  risks  faced  by  the  firm. 

C.  Properly  communicating  the  risks  to  upper  management. 

D.  Reducing  the  probability  of  loss  to  as  close  to  zero  as  possible. 

2.  Paul  Frank,  FRM,  manages  several  positions  within  a portfolio.  He  has  determined  all 
possible  outcomes  for  every  single  position.  The  result  of  his  detailed  work  means  that: 

A.  risk  mismeasurement  is  not  possible. 

B.  risk  mismeasurement  is  still  possible  for  each  of  the  positions  and  the  overall 
portfolio. 

C.  risk  mismeasurement  is  only  possible  if  the  possible  outcomes  change  and  Frank 
does  not  make  the  necessary  adjustments. 

D.  risk  mismeasurement  is  not  possible  for  each  of  the  positions,  but  it  is  possible 
for  the  overall  portfolio  because  correlations  have  not  been  addressed. 

3.  The  Tower  Corporation  has  several  divisions,  and  each  must  give  updated  reports 
on  its  risk  levels.  The  nature  of  Tower’s  business  is  that  there  is  the  possibility  of 
large  losses  that  are  very  infrequent,  some  of  which  have  never  actually  been  realized. 
Tower  requires  that  the  manager  of  each  division  include  subjective  assessments 

of  these  risks  in  their  reports.  With  respect  to  this  risk  assessment,  which  of  the 
following  statements  is  most  accurate?  This  action: 

A.  is  the  best  way  to  avoid  risk  mismeasurement. 

B.  is  always  an  appropriate  method  for  managing  risk. 

C.  can  be  a source  of  risk  mismeasurement,  but  Tower  can  expect  the  errors  to  be 
unbiased. 

D.  can  be  a source  of  risk  mismeasurement  due  to  the  subjective  input  and  the  fact 
that  there  may  be  bias  in  the  input. 

4.  If  risk  managers  are  not  certain  of  all  risks  faced  by  the  firm: 

A.  the  firm  will  most  likely  fail. 

B.  this  can  be  a source  of  risk  management  failure,  but  not  in  all  cases. 

C.  this  is  a cause  of  risk  management  failure  and  is  always  avoided  with  adequate 
research. 

D.  this  is  a source  of  risk  management  failure  and  usually  cannot  be  avoided  with 
adequate  research. 

5.  Crane  Corporation  has  a multi-tier  management  structure.  Risk  management 
occurs  in  each  division  at  the  base  level  of  the  structure  (i.e.,  in  each  division).  The 
results  of  the  process  are  then  successfully  communicated  to  higher  tiers,  where  it  is 
reviewed  and  revised  at  each  tier,  and  then  sent  to  the  appropriate  decision  makers 
for  the  firm.  This  process  is: 

A.  not  appropriate  because  it  allows  for  distortions  between  the  managers  of  risk 
and  the  decision  makers. 

B.  not  appropriate  because  risk  management  should  not  be  done  at  the  base  level  of 
a corporation. 

C.  appropriate,  and  it  would  also  be  appropriate  to  have  the  base  tier  report  directly 
to  the  top  management  tier. 

D.  appropriate  because  it  allows  for  maximum  input  into  the  process. 
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Concept  Checker  Answers 


1 . D Some  losses  are  to  be  expected  if  risk  taking  is  aimed  at  creating  value. 

2.  B Frank  must  also  consider  the  probabilities  of  the  outcomes  and  not  just  the  outcomes 

themselves.  He  must  also  consider  the  correlations  across  positions. 

3.  D Subjective  inputs  will  have  random  errors  and,  in  this  case,  may  very  well  exhibit  bias  because 

each  manager  likely  has  a motive  to  understate  risk. 

4.  B Some  risks  may  not  be  known  explicitly,  but  they  can  still  be  accounted  for.  In  this  case, 

risk  management  can  still  be  successful.  Also,  not  knowing  the  risks  themselves  but 
understanding  the  results  of  the  risk  (i.e.,  the  distribution  of  returns)  can  be  adequate  for 
successful  risk  management. 

5.  A The  fact  that  intermediate  tiers  can  modify  the  information  without  being  directly  involved 

in  the  risk  management  process  can  introduce  distortions. 
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Exam  Focus 

This  optional  reading  addresses  fundamental  concepts  regarding  portfolio  return  and 
volatility.  Be  familiar  with  the  calculations  of  expected  return  and  volatility  for  a two-asset 
portfolio  and  understand  the  importance  of  correlation  in  portfolio  diversification.  It  is  also 
important  to  understand  the  shape  of  the  portfolio  possibilities  curve  and  what  is  meant  by 
the  minimum  variance  portfolio.  Additionally,  you  should  know  what  the  efficient  frontier 
looks  like  and  how  short  sales  and  riskless  borrowing  affect  it.  We  have  included  Concept 
Checkers  at  the  end  of  this  reading  for  additional  practice  with  these  concepts. 


Expected  Return  and  Volatility  of  a Two-asset  Portfolio 

The  expected  return  on  a portfolio  is  a weighted  average  of  the  expected  returns  on  the 
individual  assets  that  are  included  in  the  portfolio.  For  example,  for  a two-asset  portfolio: 

E(Rp)=w1E(R1)  + w2E(R2) 

where: 

E(Rp)  = expected  return  on  Portfolio  P 

Wj  = proportion  (weight)  of  the  portfolio  allocated  to  Asset  i 
E(R)  = expected  return  on  Asset  i 

The  weights  (w1  and  w2)  must  sum  to  100%  for  a two-asset  portfolio. 

The  variance  of  a two-asset  portfolio  equals: 

Op  = w + w2o2  + 2w1w2Cov|>2 


where: 

dp  = variance  of  the  returns  for  Portfolio  P 

of  = variance  of  the  returns  for  Asset  1 

o2  = variance  of  the  returns  for  Asset  2 

Wj  = proportion  (weight)  of  the  portfolio  allocated  to  Asset  i 

Cov^  - covariance  between  the  returns  of  the  two  assets 
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The  covariance,  Cov1  2,  measures  the  strength  of  the  relationship  between  the  returns 
earned  on  assets  1 and  2.  The  covariance  is  unbounded  (ranges  from  negative  infinity  to 
positive  infinity);  therefore,  it  is  not  a very  useful  measure  of  the  strength  of  the  relationship 
between  two  asset’s  returns.  Instead,  we  often  scale  the  covariance  by  the  standard  deviations 
of  the  two  assets  to  derive  the  correlation  coefficient,  p,  2: 


Pi, 2 — 


Covl,2 

ala2 


From  the  previous  equation,  notice  that  the  covariance  equals  Pj  20\G2‘  Therefore,  the 
variance  of  the  two-asset  portfolio  can  also  be  written  as: 

2 i "■)  i ~) 

Op  - wj'af  + w2<J2  +2w|  W2pi#2CTiCJ2 


The  portfolio  standard  deviation  or  portfolio  volatility  is  the  positive  square  root  of  the 
portfolio  variance. 


Op 


[22,  22 

WjOj  -fw2a2 


il/2 

+ 2w1w2p1 ,2aia2 1 


Example:  Expected  return  and  volatility  for  a two-asset  portfolio 

Using  the  information  in  the  following  figure,  calculate  the  expected  return  and  standard 
deviation  of  the  two-asset  portfolio. 


Characteristics  for  a Two-Stock  Portfolio 


Caffeine  Plus 

Sparklin' 

Amount  invested 

$40,000 

$60,000 

Expected  return 

11% 

25% 

Standard  deviation 

15% 

20% 

Correlation 

0.30 

Answer: 

First,  determine  the  weight  of  each  stock  relative  to  the  entire  portfolio.  Since  the 
investments  are  $40,000  and  $60,000,  we  know  the  total  value  of  the  portfolio  is 
$100,000: 

wc  = investment/portfolio  value  = $40,000  / $100,000  = 0.40 
ws  = investment/portfolio  value  = $60,000  / $100,000  - 0.60 
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Next,  we  determine  the  expected  return  on  the  portfolio: 

E(Rp)  = wcE(Rc)  + WjECRJ 

E(R  ) = (0.40) (0. 11)  + (0.60)(0.25)  = 0.1940  = 19.40% 

Then,  we  calculate  the  variance  of  the  portfolio: 

Op  w2ct2  + ws  ct2  + 2wcwspcsocos 

= (0.40)2  (0. 1 5)2  + (0.60)2  (0.20)2  + 2(0.40)(0.60)(0.30)(0.15)(0.20) 
= 0.02232 

And,  finally,  the  standard  deviation  of  the  portfolio: 

Op  = ^O2  = Vo. 02232  = 0.1494  = 14.94% 


The  Portfolio  Possibilities  Curve 

In  the  Caffeine  Plus  and  Sparklin’  example,  we  calculated  the  expected  return  and  volatility 
of  one  possible  combination:  40%  in  Caffeine  Plus  and  60%  in  Sparklin’.  However, 
an  infinite  number  of  combinations  of  the  two  stocks  are  possible.  We  can  plot  these 
combinations  on  a graph  with  expected  return  on  they- axis  and  standard  deviation  on  the 
x-axis,  commonly  referred  to  as  plotting  in  risk/ return  “space.”  The  graph  of  the  possible 
portfolio  combinations  is  referred  to  as  the  portfolio  possibilities  curve.  Figure  1 shows 
some  of  these  combinations. 


Figure  1:  Portfolio  Returns  for  Various  Weights  of  Two  Assets 


WCaffeine  Plus 

100% 

80% 

60% 

40% 

20% 

0% 

WSparklin 

0% 

20% 

40% 

60% 

80% 

100% 

rp 

11.00% 

13.80% 

16.60% 

19.40% 

22.20% 

25.00% 

ctp 

15.00% 

13.74% 

13.72% 

14.94% 

17.10% 

20.00% 

The  plot  in  Figure  2 represents  all  possible  expected  return  and  standard  deviation 
combinations  attainable  by  investing  in  varying  amounts  of  Caffeine  Plus  and  Sparklin’. 
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Figure  2:  Expected  Return  and  Standard  Deviation  Combinations 


E(Rr) 


There  are  several  things  to  notice  about  Figure  2: 

• If  100%  of  the  portfolio  is  allocated  to  Caffeine  Plus,  the  portfolio  will  have  the  expected 
return  and  standard  deviation  of  Caffeine  Plus  (i.e.,  Caffeine  Plus  is  the  portfolio),  and 
the  investment  return  and  risk  combination  is  at  the  lower  end  of  the  curve. 

• As  the  investment  in  Caffeine  Plus  is  decreased  and  the  investment  in  Sparklin’  is 
increased,  the  investment  moves  up  the  curve  to  the  point  where  the  portfolio’s  expected 
return  is  16.6%  with  a standard  deviation  of  13.72%  (labeled  60%  Caffeine  Plus/40% 
Sparklin’). 

• Finally,  if  100%  of  the  portfolio  is  allocated  to  Sparklin’,  the  portfolio  will  have  the 
expected  return  and  standard  deviation  of  Sparklin’,  and  the  investment  return  and 
risk  combination  is  at  the  upper  end  of  the  curve  (e.g.,  higher  risk  and  higher  expected 
return). 

Minimum  Variance  Portfolio 

The  minimum  variance  portfolio  is  the  portfolio  with  the  smallest  variance  among  all 
possible  portfolios  on  a portfolio  possibilities  curve.  The  minimum  variance  portfolio 
consisting  of  Caffeine  Plus  and  Sparklin’  contains  approximately  70%  Caffeine  Plus  and 
30%  Sparklin’  and  has  an  expected  return  of  1 3.3%  and  a standard  deviation  of  13-6%.  On 
the  portfolio  possibilities  curve,  the  minimum  variance  portfolio  represents  the  left-most 
point  on  the  curve.  Figure  3 illustrates  the  minimum  variance  portfolio  for  Caffeine  Plus 
and  Sparklin’  (point  A). 
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Figure  3:  Minimum  Variance  Portfolio 


Perfect  Positive  Correlation 


In  the  case  where  two  assets  have  perfect  positive  correlation  (i.e.,  p = 1),  the  portfolio 
standard  deviation  reduces  to  the  simple  weighted  average  of  the  individual  standard 
deviations  indicating  no  diversification.  This  is  shown  mathematically  as: 


CTp  - |w1  Qj  + W2<72 


z,  W]  w 2 


W +W2CT2 


Since  expected  portfolio  return  is  a linear  combination  of  the  individual  asset  returns,  and 
risk  is  a linear  combination  of  the  individual  asset  volatilities,  the  portfolio  possibilities 
curve  for  two  perfectly  correlated  assets  is  a straight  line.  This  line  is  given  as: 


E(RP)- 


E(R, )—  E(R2) 
E(R2) o2 


+ 


[e(R,)-e(r2 


No  diversification  is  achieved  if  the  correlation  between  assets  equals  +1.  As  the  correlation 
between  two  assets  decreases , however,  the  benefits  of  diversification  increase.  As  the 
correlation  decreases,  there  is  less  tendency  for  stock  returns  to  move  together.  The  separate 
movements  of  each  stock  serve  to  reduce  the  volatility  of  a portfolio  to  a level  that  is  less 
than  the  weighted  sum  of  its  individual  components  (e.g.,  less  than  w^  + w2a2). 


Perfect  Negative  Correlation 


The  greatest  diversification  is  achieved  in  the  case  where  two  assets  have  perfect  negative 
correlation  (i.e.,  p = -1).  In  this  case,  the  portfolio  standard  deviation  reduces  to  two  linear 
equations,  which  are: 


a =[wfo2 


- w2a2 


1/2 

4-  2wj  w2  X — 1 x cqa2  I = wj  cq  - w2a2  or  wjdj  +w2a2 
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When  two  assets  have  perfect  negative  correlation,  it  is  possible  to  construct  a portfolio  with 
zero  volatility  by  setting  the  standard  deviation  equal  to  zero  and  solving  for  the  portfolio 
weights.  The  portfolio  with  zero  volatility  has  portfolio  weights  of: 


□ l + o2 

w2  = 1 — W] 


Given  that  the  standard  deviation  reduces  to  two  linear  equations,  the  portfolio  possibilities 
curve  for  two  assets  with  perfect  negative  correlation  will  be  two  line  segments. 

Zero  Correlation 

When  the  correlation  between  two  assets  is  zero,  the  covariance  term  in  the  portfolio 
standard  deviation  expression  is  eliminated,  and  the  resulting  expression  is: 

| 2 2 2 2 1^2  i ^ 

°p  — W1  °\  + w2a2  +2wj W2  XOXC7jC72  = W1  (T1  4* W2a2 


In  this  case,  the  standard  deviation  expression  reduces  to  a non-linear  equation,  and  the 
portfolio  possibilities  curve  will  be  non-linear. 

Assuming  that  the  standard  deviations  of  the  individual  assets  are  greater  than  zero,  it 
is  impossible  to  construct  a portfolio  with  zero  volatility.  The  weights  of  the  minimum 
variance  portfolio  can  be  solved  as  previously  discussed.  The  weights  are  calculated  as: 


i — 2 2 

(Jl  + cr2 

W2  — 1 — Wj 

Moderate  Positive  Correlation 


Most  equities  are  positively  correlated  (i.e.,  0 < p < 1).  If  we  assume  that  two  assets  are 
moderately  correlated  (e.g.,  p = 0.5),  then  the  portfolio  standard  deviation  reduces  to: 


wf  of  -f  w2a2  +2wjw2  x x GTjO-2 


1/2 


12  2 2 2 1^2 
W]  O]  4-w2o2  Tw1w2a|(j2 


Similar  to  the  case  of  zero  correlation,  assets  with  moderate  correlation  have  non-linear 
portfolio  possibilities  curves.  To  determine  the  minimum  variance  portfolio  in  this  case,  you 
would  apply  the  formula  discussed  in  the  previous  Professor’s  Note. 
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An  Example  of  Correlation  and  Portfolio  Diversification 

To  illustrate  the  effects  of  correlation  on  diversification,  consider  the  expected  return  and 
standard  deviation  data  derived  for  domestic  stocks,  DS,  and  domestic  bonds,  DB  as  shown 
in  Figure  4. 


Figure  4:  Diversification  Example 


Expected 

Standard 

Return 

Deviation 

Domestic  Stocks  (DS) 

0.20 

0.30 

Domestic  Bonds  (DB) 

0.10 

0.15 

Figure  5 shows  the  expected  return  and  standard  deviation  combinations  for  various 
portfolio  percentage  allocations  to  domestic  stocks  and  domestic  bonds  for  each  of  the 
correlations  +1,  0.5,  0,  and  -1. 


Figure  5:  Expected  Return/Standard  Deviation  Combinations  for  Various  Allocations 


DS  % Allocation 

DB  % Allocation 

E(RP) 

P = 1 

p m 0.5 

3 

II 

P = -1 

100.00 

0.00 

0.200 

0.300 

0.300 

0.300 

0.300 

66.67 

33.33 

0.167 

0.250 

0.229 

0.206 

0.150 

50.00 

50.00 

0.150 

0.225 

0.198 

0.168 

0.075 

33.33 

66.67 

0.133 

0.200 

0.173 

0.141 

0.000 

0.00 

100.00 

0.100 

0.150 

0.150 

0.150 

0.150 

Figure  6 shows  the  plot  of  the  expected  returns  and  standard  deviations  for  each  of  the  four 
correlations. 

Figure  6:  Effects  of  Correlation  on  Portfolio  Risk 

E(Rp) 
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As  indicated  in  Figure  6,  the  lower  the  correlation  between  the  returns  of  the  stocks  in 
the  portfolio,  the  greater  the  diversification  benefits.  If  the  correlation  equals  +1  (the  solid 
black  line),  the  minimum-variance  frontier  is  a straight  line  between  the  two  points  (DB 
and  DS),  and  there  is  no  benefit  to  diversification.  If  the  correlation  equals  -1  (the  solid 
blue  line),  the  minimum-variance  frontier  is  two  straight-line  segments,  and  there  exists  a 
portfolio  combination  of  stocks  and  bonds  with  a standard  deviation  of  zero  (the  allocation 
of  66.67%  to  domestic  bonds  and  33-33%  to  domestic  stocks). 


The  Shape  of  the  Portfolio  Possibilities  Curve 


Professor's  Note:  In  this  section , we  are  not  considering  the  special  cases  where 

©the  portfolio  possibilities  curve  is  a straight  line  (i.e.,  p = 1)  or  two  line  segments 
(i.e.y  p - ~1).  In  all  other  cases,  the  portfolio  possibilities  curve  is  a curve 
similar  to  Figure  7. 

Looking  at  Figure  7,  the  shape  of  the  portfolio  possibilities  curve  is  best  described  in  two 
pieces. 

• The  piece  of  the  portfolio  possibilities  curve  that  lies  above  the  minimum  variance 
portfolio  (from  point  C through  point  G)  is  concave. 

• The  piece  of  the  portfolio  possibilities  curve  that  lies  below  the  minimum  variance 
portfolio  (from  point  A through  point  C)  is  convex. 

Figure  7:  Shape  of  the  Portfolio  Possibilities  Curve 

E(Rp) 


Professor's  Note:  A concave  function  is  one  where  the  function  lies  above  a 
straight-line  segment  connecting  any  two  points  on  the  function.  A convex 
function  lies  below  a straight-line  segment  connecting  any  two  points  on  the 

O function. 

In  Figure  7,  the  function  is  above  the  line  segment  from  C to  G.  Therefore,  the 
portion  of  the  portfolio  possibilities  curve  from  C to  G is  concave.  The  function 
is  below  the  line  segment  from  A to  C.  Therefore,  the  portion  of  the  portfolio 
possibilities  curve  from  A to  C is  convex. 
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Another  important  aspect  regarding  the  shape  of  the  portfolio  possibilities  curve  is  that 
the  curve  must  lie  to  the  left  of  a line  segment  connecting  any  two  points  on  the  curve. 
From  the  discussion  of  portfolio  diversification  and  correlation,  combinations  of  two  assets 
with  perfect  positive  correlation  result  in  a straight  line.  Combinations  of  assets  with  lower 
correlation  will  always  lie  to  the  left  of  that  line. 


The  Efficient  Frontier 

Plotting  all  risky  assets  and  potential  combinations  of  risky  assets  will  result  in  a graph 
similar  to  Figure  8. 


Figure  8:  Efficient  Frontier 


E(RP) 


Notice  that  the  graph  includes  some  portfolios  that  no  rational  investor  would  select.  All 
portfolios  lying  on  the  inside  of  the  curve  are  inefficient.  Additionally,  some  portfolios 
offer  higher  returns  with  identical  risk.  For  example,  portfolios  A and  E have  identical  risk; 
however,  Portfolio  E has  a much  higher  expected  return,  and  a similar  contrast  exists  for 
Portfolio  D versus  Portfolio  B.  All  rational  investors  would  prefer  Portfolio  D over  Portfolio 
B,  and  Portfolio  E over  Portfolio  A. 

Portfolios  such  as  D and  E are  called  efficient  portfolios,  which  are  portfolios  that  have: 

■ Minimum  risk  of  all  portfolios  with  the  same  expected  return. 

■ Maximum  expected  return  for  all  portfolios  with  the  same  risk. 

The  efficient  frontier  is  a plot  of  the  expected  return  and  risk  combinations  of  all  efficient 
portfolios,  all  of  which  lie  along  the  upper-left  portion  of  the  possible  portfolios  (from  Point 
C to  Point  G in  Figure  8). 

Short  Sales  and  the  Efficient  Frontier 

When  short  sales  are  allowed,  the  shape  of  the  efficient  frontier  changes.  To  examine  how  it 
changes,  consider  again  the  Caffeine  Plus  and  Sparklin’  example. 

Referring  back  to  the  example,  Caffeine  Plus  has  an  expected  return  of  1 1 % and  a standard 
deviation  of  15%,  and  Sparklin’  has  an  expected  return  of  25%  and  a standard  deviation 
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of  20%.  The  correlation  between  Caffeine  Plus  and  Sparklin’  is  0.30.  Although  neither 
stock  has  a negative  return,  it  may  make  sense  to  short  sell  one  of  the  stocks.  In  this  case, 
Sparklin’  has  a higher  expected  return,  so  shorting  Caffeine  Plus  and  investing  in  Sparklin’ 
would  expand  the  efficient  frontier.  Figure  9 highlights  the  portfolio  return  and  volatility 
for  combinations  of  Sparklin’  and  Caffeine  Plus  including  short  sales. 

Figure  9:  Portfolio  Returns  for  Various  Weights  of  Two  Assets  (w/  Short  Sales) 

WCaffeine  Pius  100%  80%  60%  40%  20%  0%  -20%  ^0%  “60%  -80%  -100% 

WSparklm  0%  20%  40%  60%  80%  100%  120%  l40%  l60°/o  180%  200% 

Rp  11.00%  13.80%  16.60%  19.40%  22.20%  25.00%  27.80%  30.60%  33.40%  36.20%  39.00% 

ap  15.00%  13.74%  13.72%  14.94%  17.10%20.00%  23.28%  26.82%  30.53%  34.36%  38.28% 


When  allowing  for  short  sales,  the  efficient  frontier  expands  up  and  to  the  right.  By 
shorting,  it  is  possible  to  create  higher  return  and  higher  volatility  portfolio  combinations 
that  would  not  be  possible  otherwise.  Theoretically,  with  no  limitations  on  shorting,  it 
would  be  possible  to  construct  a portfolio  with  infinite  return. 


©Professor’s  Note:  Up  to  this  point , we  have  discussed  risky  assets.  Now,  we  add 
the  risk-free  asset  to  the  set  of  asset  choices  and  examine  the  ejfect  it  has  on 
investment  choices. 


Combining  the  Risk-Free  Rate  with  the  Efficient  Frontier 

So  far,  our  portfolios  have  consisted  of  risky  assets  only.  However,  in  reality,  investors 
usually  allocate  their  wealth  across  both  risky  and  risk-free  assets.  The  following  discussion 
illustrates  the  effects  of  the  inclusion  of  the  risk-free  asset.  A risk-free  asset  is  a security  that 
has  a return  known  ahead  of  time,  so  the  variance  of  the  return  is  zero. 

Consider  the  task  of  creating  portfolios  comprising  the  risk-free  asset,  F,  and  a risky 
portfolio,  P.  Assume  that  Portfolio  P lies  on  the  efficient  frontier  of  risky  assets.  Various 
combinations  (weightings)  of  Portfolio  P and  the  risk-free  asset  can  be  created.  By  adding 
the  risk-free  asset  to  the  investment  mix,  a very  important  property  emerges:  The  shape  of  the 
efficient  frontier  changes  from  a curve  to  a line. 

Recall  that  the  expected  return  for  a portfolio  of  two  assets  equals  the  weighted  average  of 
the  asset  expected  returns.  Therefore,  the  expected  return  on  Investment  C that  combines 
the  risk-free  asset  and  risky  Portfolio  P equals: 


E(RC)  = wFRF  + WpE(Rp) 


where: 

Wp  = percentage  allocated  to  the  risk-free  asset 
Wp  = percentage  allocated  to  Portfolio  P 
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Also,  recall  that  the  variance  of  the  portfolio  of  two  assets  (F  and  P)  equals: 

°C  = wFaF  "f  wpap  + 2wpWpCovpp 

where: 

2 

aC  = variance  for  Investment  C 
2 

ctF  = variance  for  the  risk-free  asset 
2 

CTP  = variance  for  Portfolio  P 
Covpp  = covariance  between  F and  P 

Observe  that  since  we  know  that  the  variance  and  the  standard  deviation  of  the  risk-free 
asset  both  equal  zero,  and  that  the  covariance  of  the  risk-free  asset  with  any  risky  asset  also 
equals  zero,  the  equations  for  the  variance  and  standard  deviation  for  Investment  C simplify 
to: 

2 2 2 
CTC  = WpCFp 

G c — W p (7  p 


Because  the  expected  return  and  portfolio  standard  deviation  of  the  combination  of  a 
risk-free  asset  and  risky  portfolio  are  both  linear,  the  efficient  frontier  reduces  to  a linear 
equation.  That  is,  by  including  the  risk-free  asset,  we  have  caused  the  efficient  frontier  to 
become  a straight  line.  The  equation  for  the  efficient  frontier  becomes  the  capital  market 
line  (CML). 


E(Rc)  = Rf  + 


E(Rp)-Rf 

aP 


aC 


Figure  10  illustrates  the  combination  of  the  risk-free  asset  with  the  risky  portfolio. 


Figure  10:  Efficient  Frontier  including  the  Risk-Free  Asset 


E(R) 


When  the  risk-free  asset  is  combined  with  the  risky  Portfolio  P,  the  efficient  frontier 
becomes  a line  with: 

• The  intercept  equal  to  the  risk-free  rate,  and 

• The  slope  equal  to  the  reward-to-risk  ratio  for  the  risky  portfolio. 
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Note  that  the  capital  market  line  is  tangent  to  the  efficient  frontier.  The  point  of  tangency, 
Portfolio  P,  is  known  as  the  market  portfolio.  This  portfolio  contains  all  available  risky  assets 
in  proportion  to  their  total  market  values. 

If  all  investors  agree  on  the  efficient  frontier  (i.e.,  they  have  homogeneous  expectations 
regarding  the  risks  and  returns  for  all  risky  assets),  they  will  hold  a combination  of  the 
market  portfolio  and  the  risk-free  asset.  Risk- averse  investors  will  create  lower  risk  portfolios 
by  lending  (i.e.,  investing  in  the  risk-free  asset).  More  risk-tolerant  investors  will  increase 
portfolio  return  by  borrowing  at  the  risk-free  rate.  This  result  is  known  as  the  separation 
theorem. 
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Concept  Checkers 


1.  Assume  the  following  information  for  stocks  A and  B. 

• Expected  return  on  Stock  A = 18%. 

• Expected  return  on  Stock  B = 23%. 

• Correlation  between  returns  of  Stock  A and  Stock  B =0.10. 

• Standard  deviation  of  returns  on  Stock  A = 40%. 

• Standard  deviation  of  returns  on  Stock  B = 50%. 

The  expected  return  and  standard  deviation  of  an  equally  weighted  portfolio  of 
stocks  A and  B are  closest  to: 


Expected  return  (%) 

Standard  deviation  (%) 

A. 

20.5 

33.54 

B. 

20.5 

1 1.22 

C. 

33.5 

1 1.22 

D. 

33.5 

33.54 

Use  the  following  data  to  answer  Questions  2 and  3- 

Assume  the  expected  return  on  stocks  is  1 8%  (represented  by  Z in  the  figure),  and  the 
expected  return  on  bonds  is  8%  (represented  by  point  Ton  the  graph). 


Portfolio  Possibilities  Curve:  Stocks  and  Bonds 


E(RJ 


20% 


16%  ■ 


1 2%  - 
8%  ' 


4%  - 


0% 


10% 


20% 


3r 


2.  The  graph  shows  the  portfolio  possibilities  curve  for  stocks  and  bonds.  The  point 
on  the  graph  that  most  likely  represents  a 90%  allocation  in  stocks  and  a 10% 
allocation  in  bonds  is  Portfolio: 


A. 

W. 

B. 

X. 

C. 

Y. 

D. 

Z. 
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3.  The  efficient  frontier  consists  of  the  portfolios  between  and  including: 

A.  XandW. 

B.  YandZ. 

C.  XandZ. 

D.  Y and  X. 

4.  Which  of  the  following  best  describes  the  shape  of  the  portfolio  possibilities  curve? 

A.  The  curve  is  strictly  convex. 

B.  The  curve  is  strictly  concave. 

C.  The  curve  is  concave  above  the  minimum  variance  portfolio  and  convex  below 
the  minimum  variance  portfolio. 

D.  The  curve  is  convex  above  the  minimum  variance  portfolio  and  concave  below 
the  minimum  variance  portfolio. 

3.  When  short  sales  are  possible  (i.e.,  there  are  no  short  sale  restrictions),  the  efficient 
frontier  is: 

A.  a straight  line  between  the  risk-free  asset  and  the  market  portfolio. 

B.  two  line  segments,  which  indicate  a negative  relationship  between  short  and 
long  positions. 

C.  expanded  to  include  portfolios  with  higher  return  and  lower  volatility. 

D.  expanded  to  include  portfolios  with  higher  return  and  higher  volatility. 
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Concept  Checker  Answers 


1.  A 


E(RP)  = waE(Ra  ) + wbE(Rb  ) = (0.50)  (0.18)  + (0.50)  (0.23)  = 0.205  = 20.5% 

°p  = [WA°A  + wBaB  +2wAWBpABCTACTBJ  2 


(0.5)2  (0.4)2  +(0.5)2  (0.5)2 
+2  (0.5)  (0.5)  (0. 1)  (0.4)  (0.5) 


2 

= 0.3354  = 33.54% 


2.  A Since  the  return  to  Wis  the  nearest  to  Z (stocks),  it  is  logical  to  assume  that  point  W 

represents  an  allocation  of  90%  stocks/ 10%  bonds.  The  return  for  Wi s lower  than  Z,  but  it 
also  represents  a reduction  in  risk. 

3-  C The  efficient  frontier  consists  of  portfolios  that  have  the  maximum  expected  return  for  any 
given  level  of  risk  (standard  deviation  or  variance).  The  efficient  frontier  starts  at  the  global 
minimum-variance  portfolio  and  continues  above  it.  Any  portfolio  below  the  efficient 
frontier  is  dominated  by  a portfolio  on  the  efficient  frontier.  This  is  because  efficient 
portfolios  have  higher  expected  returns  for  the  same  level  of  risk. 

4.  C The  portfolio  possibilities  curve  is  concave  above  the  minimum  variance  portfolio  and 

convex  below  the  minimum  variance  portfolio. 

5.  D When  short  sales  are  allowed,  the  efficient  frontier  expands  up  and  to  the  right  (i.e.,  higher 

return  and  higher  volatility  portfolio  combinations  become  feasible).  When  considering  two 
stocks,  by  shorting  the  stock  with  lower  expected  return  and  using  the  proceeds  to  increase 
the  investment  in  the  other  stock,  it  is  possible  to  increase  portfolio  return.  This  increased 
return  comes  at  a cost  of  higher  volatility,  though. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


The  Standard  Capital  Asset 
Pricing  Model 


Topic  9 

Exam  Focus 

This  topic  discusses  the  capital  market  line  (CML)  and  the  capital  asset  pricing  model 
(CAPM).  The  CAPM  requires  many  assumptions,  such  as  the  existence  of  a risk-free  asset 
and  that  all  investors  have  the  same  type  of  utility  function  and  expectations.  The  existence 
of  a risk-free  asset  means  the  efficient  frontier  becomes  a straight  line,  which  allows  for  the 
use  of  simple  expressions  to  analyze  price  risk.  It  is  important  to  have  a firm  grasp  on  the 
CAPM  calculation  methodology. 


The  Capital  Asset  Pricing  Model  (CAPM) 


LO  9.2:  Describe  the  assumptions  underlying  the  CAPM. 


The  capital  asset  pricing  model  (CAPM),  derived  by  Sharpe,  Lintner,  and  Mossin,  is  one 
of  the  most  celebrated  models  in  all  of  finance.  The  model  describes  the  relationship  we 
should  expect  to  see  between  risk  and  return  for  individual  assets.  Specifically,  the  CAPM 
provides  a way  to  calculate  an  asset's  expected  return  (or  “required”  return)  based  on  its  level 
of  systematic  (or  market-related)  risk,  as  measured  by  the  asset  s beta. 

CAPM  Assumptions 

In  the  derivation  of  any  economic  or  scientific  model,  simplifying  assumptions  regarding 
the  market,  which  the  model  represents,  must  be  made.  The  CAPM  has  a number  of 
underlying  assumptions: 

1 . Investors  face  no  transaction  costs  when  trading  assets.  This  assumption  simplifies 
the  computation  of  returns.  If  transaction  costs  were  considered,  returns  would  be  a 
function  of  transaction  costs,  which  would  then  have  to  be  estimated. 

2.  Assets  are  infinitely  divisible.  It  is  possible  to  hold  fractional  shares. 

3.  There  are  no  taxes;  therefore,  investors  are  indifferent  between  capital  gains  and  income 
or  dividends. 

4.  Investors  are  price  takers  whose  individual  buy  and  sell  decisions  have  no  effect  on  asset 
prices.  The  market  for  assets  is  perfectly  competitive. 

5.  Investors’  utility  functions  are  based  solely  on  expected  portfolio  return  and  risk.  This 
assumption  provides  a framework  for  how  investors  make  investment  decisions. 

6.  Unlimited  short-selling  is  allowed.  Investors  can  sell  an  unlimited  number  of  shares  of 
an  asset  short. 
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7.  Investors  can  borrow  and  lend  unlimited  amounts  at  the  risk-free  rate. 

8.  Investors  are  only  concerned  about  returns  and  risk  over  a single  period,  and  the  single 
period  is  the  same  for  all  investors. 

9.  All  investors  have  the  same  forecasts  of  expected  returns,  variances,  and  covariances. 

This  is  known  as  homogeneous  expectations. 

10.  All  assets  are  marketable,  including  human  capital. 

The  Capital  Market  Line  (CML) 


LO  9.3:  Interpret  the  capital  market  line. 


In  the  presence  of  riskless  lending  and  borrowing,  the  efficient  frontier  transforms  from 
a curve  to  a line  tangent  to  the  previous  curve.  Investors  will  choose  to  invest  in  some 
combination  of  their  tangency  portfolio  and  the  risk-free  asset.  Assuming  investors  have 
identical  expectations  regarding  expected  returns,  standard  deviations,  and  correlations  of 
all  assets,  there  will  be  only  one  tangency  line,  which  is  referred  to  as  the  capital  market  line 
(CML). 

Under  the  assumptions  of  the  CML,  all  investors  agree  on  the  exact  composition  of  the 
optimal  risky  portfolio.  This  universally  agreed  upon  optimal  risky  portfolio  is  called  the 
market  portfolio,  M,  and  it  is  defined  as  the  portfolio  of  all  marketable  assets  weighted  in 
proportion  to  their  relative  market  values.  For  instance,  if  the  market  value  of  Asset  X is 
$1  billion,  and  the  market  value  of  all  traded  assets  is  $100  billion,  then  the  weight 
allocated  to  Asset  X in  the  market  portfolio  equals  1%. 

The  key  conclusion  of  the  CML  can  be  summarized  as  follows:  All  investors  will  make 
optimal  investment  decisions  by  allocating  between  the  risk-free  asset  and  the  market  portfolio. 

Figure  1 provides  a graph  of  the  CML. 


Figure  1:  The  Capital  Market  Line 


E(Rp) 
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The  equation  for  the  CML  is: 


E(Rp)  = Rp  + 


aM 


cip 


The  slope  of  the  CML  is  often  called  the  market  price  of  risk  and  equals  the 
reward-to-risk  ratio  (or  Sharpe  ratio)  for  the  market  portfolio.  This  is  calculated  as: 

E(RM ) — Rf 


©Professor's  Note:  We  will  examine  the  calculation  of  risk-adjusted  return  measures , 
such  as  the  Sharpe  ratio , in  Topic  10. 


The  CML  is  useful  for  computing  the  expected  return  for  an  efficient  (diversified) 
portfolio;  however,  it  cannot  compute  the  expected  return  for  inefficient  portfolios  or 
individual  securities.  The  CAPM  must  be  used  to  compute  the  expected  return  for  any 
inefficient  portfolio  or  individual  security. 


Beta 


LO  9.5:  Interpret  beta  and  calculate  the  beta  of  a single  asset  or  portfolio. 


The  sensitivity  of  an  assets  return  to  the  market  return  is  referred  to  as  the  assets  beta.  Beta 
is  a standardized  measure  of  the  covariance  of  the  assets  return  with  the  market  return.  Beta 
can  be  calculated  as  follows: 


Pi  = 


covariance  of  Asset  i’s  return  with  the  market  return  CoVj 


i,M 


variance  of  the  market  return 


crM 


We  can  use  the  definition  of  the  correlation  between  the  returns  on  Asset  i with  the  returns 
on  the  market  to  get  the  covariance  equation: 

_ Covi,M 

Pi,M  

CTiCTM 

Covi,M  = Pi,MCTiaM 


Therefore,  by  substituting  for  CoVj  M in  the  equation  for  (3j,  we  can  also  calculate  beta  as: 


0i  = 


Pi,MaiCTM  _ <*j 

2 “ Pi,M 

aM 
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Example:  Calculating  an  assets  beta 


The  standard  deviation  of  the  market  return  is  estimated  as  20%. 

1.  If  Asset  As  standard  deviation  is  30%  and  its  correlation  of  returns  with  the  market 
index  is  0.8,  what  is  Asset  As  beta? 

Using  the  formula:  |3j  = pj  M we  have:  (3j  = 0.80 — — = 1.2. 

* crM  0.20 


2.  If  the  covariance  of  Asset  As  returns  with  the  returns  on  the  market  index  is  0.048, 
what  is  the  beta  of  Asset  A? 


Using  the  formula:  (3j 


COV: 


i.M 


_2 

ctM 


, we  have:  3j 


0048 

0.22 


= 1.2. 


In  practice,  we  estimate  asset  betas  by  regressing  returns  on  the  asset  on  those  of  the  market 
index.  While  regression  is  a concept  discussed  in  Book  2,  for  the  purposes  of  this  topic, 
you  can  think  of  it  as  a mathematical  estimation  procedure  that  fits  a line  to  a data  plot.  In 
Figure  2,  we  represent  the  excess  returns  on  Asset  i as  the  dependent  variable  and  the  excess 
returns  on  the  market  index  as  the  independent  variable.  The  least  squares  regression  line  is 
the  line  that  minimizes  the  sum  of  the  squared  distances  of  the  points  plotted  from  the  line 
(this  is  what  is  meant  by  the  line  of  best  fit).  The  slope  of  this  line  is  our  estimate  of  beta. 

In  Figure  2,  since  the  line  is  steeper  than  45  degrees,  the  slope  is  greater  than  one,  and  the 
assets  estimated  beta  is  greater  than  one.  Our  interpretation  is  that  the  returns  on  Asset  i are 
more  variable  in  response  to  systematic  risk  factors  than  the  overall  market,  which  has  a beta 
of  one. 

Figure  2:  Regression  of  Asset  Excess  Returns  against  Market  Asset  Returns 


This  regression  line  is  referred  to  as  the  asset’s  security  characteristic  line.  Mathematically, 
the  slope  of  the  security  characteristic  line  is:  Covj  m / °M’  which  is  the  same  formula  used 
to  calculate  beta. 
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Portfolio  Beta 

In  addition  to  individual  assets,  beta  can  also  be  computed  for  portfolios.  The  beta  of  a 
portfolio  is  the  sum  of  the  weighted  individual  asset  betas  within  a portfolio. 


Example:  Calculating  portfolio  beta 

Consider  the  following  individual  asset  weights  and  betas  for  a 4-asset  portfolio. 


Asset 

Portfolio  Weight 

Beta 

1 

25% 

1.2 

2 

15% 

1.8 

3 

35% 

0.9 

4 

25% 

1.4 

Calculate  the  beta  of  this  4-asset  portfolio. 


Answer: 

Pp  = wjpj  + w2p2  4-  W3P3  4-  W434 

3p  = (0.23  x 1 .2)  4 (o.  1 5 X 1 .8)  4 (0.35  X 0.9)  + (0.25  x 1 .4) 

pp  = 0.3  4 0.27  4 0.315  4 0.35  = 1.235 


Deriving  the  CAPM 


LO  9-1:  Understand  the  derivation  and  components  of  the  CAPM. 


A Straightforward  Derivation 

The  procedure  used  to  derive  the  equation  for  the  capital  asset  pricing  model  requires  an 
understanding  of  the  characteristics  of  expected  return,  beta,  the  risk-free  rate,  and  the 
security  market  line.  The  following  steps  illustrate  how  the  CAPM  is  derived.  The  end  result 
will  be  an  equation  where  the  expected  return  on  a single  security  or  portfolio  of  securities  is 
equal  to: 


Rp  4 Betaj[E(RM)  — Rp] 


The  first  step  in  the  derivation  is  to  recognize  that  beta  identifies  the  appropriate  level  of 
risk  for  which  an  investor  should  be  compensated.  An  important  concept  in  finance  is  that, 
as  a portfolio  becomes  more  diversified,  idiosyncratic  risk  (i.e.,  unsystematic  risk  or  asset- 
specific  risk)  in  the  portfolio  becomes  less  of  an  issue  as  only  systematic  risk  remains. 
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Professor's  Note:  Starting  with  the  formula  for  portfolio  variance , and  assuming 
n equally-weighted  assets  (e.g.,  each  w = l In),  it  is  possible  to  show  that  the 
portfolio  variance  for  an  equally-weighted  portfolio  is: 

9 1 9 n — 1 

n 

where: 

_2 


- Cov 


average  variance  of  all  assets  in  the  portfolio 

Cov  = average  covariance  of all  pairings  of  assets  in  the  por folio 

Note  that  the  equally-weighted  porfolio  variance  equals  the  sum  of  two  components 
(unsystematic  risk:  the  variance  term  and  systematic  risk:  the  covariance  term),  each 
of  which  is  affected  by  the  size  of  the  porfolio: 


(l  / n)x<rf  gets  closer  to  zero  as  n gets  larger  because  1/n  approaches  zero. 

(n  — l)  / n\  X Cov  gets  closer  to  the  average  covariance  as  n gets  larger  because 
n-  1)  I n approaches  1. 


Therefore,  the  following  important  result  emerges:  The  variance  of  an  equally- 
weighted  porfolio  approaches  the  average  covariance  as  n gets  large. 

Since  diversification  is  costless  and  systematic  risk  is  the  only  remaining  risk  in  a 
diversified  portfolio,  an  investor  should  only  be  compensated  for  systematic  risk  (or  beta) 
exposure.  Therefore,  all  assets  with  the  same  beta  should  earn  the  same  return. 

The  next  step  in  the  derivation  is  to  recognize  that  expected  return  is  a linear  function 
of  beta.  Since  portfolio  beta  is  the  weighted  average  of  the  individual  betas  and  expected 
portfolio  return  is  a weighted  average  of  the  individual  expected  returns,  the  portfolio 
expected  return  is  a linear  function  of  beta. 

E(Rp)  = a + mx(3p 

where: 


f3p 


Cov 


P,M 


Covp  m — covariance  between  the  returns  for  Stock  P and  the  market  portfolio 


= variance  of  the  returns  on  the  market  portfolio 
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Professor’s  Note:  To  show  that  portfolio  return  is  a linear  function  of  beta,  start  with 
the  functions  for  expected  portfolio  return  and  portfolio  beta. 

E{Rp)  — wlE(R})-\-(l  w])E(R2) 

(3p  = W\  > l|  T (j  — w^ ) 3 2 


Solve  w j in  the  portfolio  beta  equation: 


Wj  = 


0P  ~ 02 

01  ~ 02 


Substitute  w j into  the  portfolio  expected  return  equation: 

0P  ~ 02 


E{Rp)  = 0r — w~E{Ri) 


Pi  - P2 

E{R2)~ 


1-- 


Pi  ~ P2 


E(Rp ) = 


E(RP ) — a -(-  p 


,g2[£(7?,)-f(/?2)] 


01  ~ 02 


+ 0P 


e(r2) 

eW-e(r2)\ 


Pi  ~ P2 


where: 

a = E{R2)TT\EEhlM 

P1-P2 

[£(*,)-£(* 2)1 

m = 

01  ~ 02 

Assets  with  equivalent  betas  should  earn  the  same  return  because  arbitrage  will  prevent 
assets  with  the  same  risk  from  earning  different  returns.  So,  if  (3j  = (3p  and  E(Rj)  = E(Rp), 
then  we  can  express  the  expected  return  for  asset  i as  a linear  function  of  its  beta: 

E(Rj)  = a + m x Pj 


As  shown  in  Figure  3,  this  equation  plots  a straight  line,  known  as  the  security  market  line 
(SML)  with  an  intercept  of  a and  slope  of  m.  Thus,  the  SML  is  a graphical  representation  of 
the  CAPM. 


Figure  3:  The  Security  Market  Line 
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The  final  step  in  this  derivation  is  to  find  two  points  on  the  SML  and  solve  for  the  CAPM. 
To  solve  for  the  equation  of  a line  (which  is  known  as  identifying  the  line),  we  need  to 
know  two  points  on  the  line.  Fortunately,  we  do  know  two  of  the  points  on  this  line:  the 
risk-free  asset  and  the  market  portfolio.  Since  it  has  no  risk,  the  risk-free  asset  has  a beta  of 
zero;  therefore,  the  intercept  of  the  SML  is  Rp,  and  our  first  point  is  (0,  Rp).  The  market 
portfolio  has  a beta  of  one,  so  the  second  point  is  [1,  E(RM)].  With  these  two  points,  we  can 
find  the  slope  of  the  line,  m: 

E(Rj)  = a + m x p. 

E(Rm)  = RF  + m x 1 


m - E(Rm)  — R; 


Professor's  Note:  It  is  relatively  straightforward  to  see  that  the  beta  of  the  market  is 
one.  The  covariance  of  the  market  with  itself  is  equal  to  the  variance  of  the  market. 
Therefore,  solving  for  market  beta,  we  get: 

(3m  = Covmj±=o±  = 1 

aM  aM 


With  information  on  both  the  intercept  (a)  and  the  slope  (m),  we  are  now  able  to  display 
the  well-known  capital  asset  pricing  model: 

E(Rj)  = Rp  + [E(Rm)  - RplPj 


Calculating  Expected  Return  Using  the  CAPM 


LO  9.4:  Apply  the  CAPM  in  calculating  the  expected  return  on  an  asset. 


Example:  Expected  return  on  a stock 

Assume  you  are  assigned  the  task  of  evaluating  the  stock  of  Sky-Air,  Inc.  To  evaluate  the 
stock,  you  calculate  its  required  return  using  the  CAPM.  The  following  information  is 
available: 

expected  market  risk  premium  3% 
risk-free  rate  4% 

Sky-Air  beta  1.3 

Using  CAPM,  calculate  and  interpret  the  expected  return  for  Sky-Air. 
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Answer: 

The  expected  return  for  Sky-Air  is: 

E(RSA)  = 0.04  + 1.5(0.03)  = 0.115  = 11.5% 

The  market  risk  premium  is  the  expected  market  return  minus  the  risk-free  rate.  The 
CAPM  return  can  be  viewed  as  the  minimum  return  that  investors  should  be  willing  to 
accept  (i.e.,  the  required  rate  of  return),  commensurate  with  the  risk  associated  with  the 
asset.  For  example,  if  investors  predict  that  the  return  will  exceed  1 1.5%,  then  they  should 
buy  Sky-Air  stock.  However,  if  investors  predict  that  the  return  will  be  less  than  1 1.5%, 
then  they  should  sell  Sky -Air  stock  (or  short  the  stock). 

Figure  4 illustrates  the  required  return  for  Sky-Air  on  the  SML. 

Figure  4:  Sky-Air  Plotted  on  the  Security  Market  Line 


In  the  previous  example,  we  calculated  the  required  rate  of  return,  which  always  lies  on 
the  security  market  line.  If  through  the  valuation  of  an  asset  an  analyst  determines  that 
the  expected  return  is  different  from  the  required  rate  of  return  implied  by  CAPM,  then 
the  security  may  be  mispriced  according  to  rational  expectations.  A mispriced  security 
would  not  lie  on  the  security  market  line.  In  general: 

• An  overvalued  security  would  have  a required  rate  of  return  (computed  by  CAPM)  that 
is  higher  than  its  expected  return  (computed  by  the  analysts  valuation).  An  overvalued 
security  would  lie  below  the  security  market  line. 

• An  undervalued  security  would  have  a required  rate  of  return  (computed  by  CAPM)  that 
is  lower  than  its  expected  return  (computed  by  the  analyst’s  valuation).  An  undervalued 
security  would  lie  above  the  security  market  line. 

In  addition  to  computing  the  required  or  expected  return  for  an  individual  asset,  it  is 
possible  to  solve  for  the  expected  return  on  the  market  and/or  the  market  risk  premium 
given  the  risk-free  rate,  expected  return  on  an  asset,  and  the  systematic  risk  for  that  asset. 
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Example:  Using  CAPM  to  calculate  the  expected  market  return 

A stock  has  a beta  of  0.75  and  an  expected  return  of  13%.  The  risk-free  rate  is  4%. 

Calculate  the  market  risk  premium  and  the  expected  return  on  the  market  portfolio. 

Answer: 

According  to  CAPM:  0.13  = 0.04  + 0.75[E(RM)  — Rp]. 

Therefore,  the  market  risk  premium  is  equal  to:  [E(RM)  - Rp]  = 0.12  = 12%. 

The  expected  return  on  the  market  is  calculated  as:  [E(RM)  - 0.04]  = 0.12,  or  E(RM)  = 

0.16  = 16%. 


©2015  Kaplan,  Inc. 


Page  121 


Topic  9 

Cross  Reference  to  GARP  Assigned  Reading  - Elton,  et  al.,  Chapter  13 


Key  Concepts 


LO  9.1 

There  are  three  major  steps  in  deriving  the  CAPM: 

1 . Recognize  that  since  investors  are  only  compensated  for  bearing  systematic  risk,  beta  is 
the  appropriate  measure  of  risk. 

2.  By  knowing  that  portfolio  expected  return  is  a weighted  average  of  individual  expected 
returns  and  portfolio  beta  is  a weighted  average  of  the  individual  betas,  we  can  show 
that  portfolio  return  is  a linear  function  of  portfolio  beta.  Since  arbitrage  prevents 
mispricing  of  assets  relative  to  systematic  risk  (beta),  an  individual  asset’s  expected 
return  is  a linear  function  of  its  beta. 

3.  Use  the  risk-free  asset  and  the  market  portfolio,  which  are  two  points  on  the  security 
market  line,  to  solve  for  the  intercept  and  slope  of  the  CAPM.  The  equation  for  CAPM 

is: 


E(Rj)  = RF  + [E(Rm)  - RplPj 


LO  9.2 

The  capital  asset  pricing  model  (CAPM),  derived  by  Sharpe,  Lintner,  and  Mossin,  expresses 
the  expected  return  for  an  asset  as  a function  of  the  assets  level  of  systematic  risk  (measured 
by  beta),  the  risk-free  rate,  and  the  market  risk  premium  (the  expected  return  of  the  market 
minus  the  risk-free  rate).  There  are  several  assumptions  underlying  the  CAPM. 

• Investors  face  no  transaction  costs. 

• Assets  are  infinitely  divisible. 

• There  are  no  taxes. 

• Investors  are  price  takers  whose  individual  buy  and  sell  decisions  have  no  effect  on  asset 
prices. 

• Investors’  utility  functions  are  based  solely  on  expected  portfolio  return  and  risk. 

• Unlimited  short-selling  is  allowed. 

• Investors  are  only  concerned  about  returns  and  risk  over  a single  period,  and  the  single 
period  is  the  same  for  all  investors. 

■ All  investors  have  the  same  forecasts  of  expected  returns,  variances,  and  covariances. 

■ All  assets  are  marketable. 


LO  9.3 


The  capital  market  line  (CML)  expresses  the  expected  return  of  a portfolio  as  a linear 
function  of  its  standard  deviation,  the  market  portfolio’s  return  and  standard  deviation,  and 
the  risk-free  rate. 


E(RC)  = RF  + 


E(Rm)—  Rp 

aM 
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LO  9.4 

The  expected  return  for  an  asset  can  be  computed  using  the  CAPM  given  the  risk-free  rate, 
the  market  risk  premium,  and  an  asset’s  systematic  risk. 


LO  9.3 

Beta  can  be  calculated  using  the  following  equation: 

_ Covi]M 
Pi  2 
aM 

Portfolio  beta  is  the  weighted  average  of  the  asset  betas  in  a portfolio. 
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Concept  Checkers 


1.  Which  of  the  following  statements  is  most  likely  an  assumption  of  the  capital  asset 
pricing  model  (CAPM)? 

A.  Investors  only  face  capital  gains  taxes. 

B.  Investors’  actions  affect  the  prices  of  assets. 

C.  Transaction  costs  are  constant  across  all  assets. 

D.  All  assets  including  human  capital  arc  marketable. 

Use  the  following  graph  to  answer  Question  2. 

Mean- Variance  Analysis 


E(RP) 


2.  Portfolio  P in  the  mean  variance  analysis  represents  the  tangency  point  between  the 
capital  market  line  and  the  portfolio  possibilities  curve.  In  this  analysis,  the  market 
price  of  risk  would  be  the: 

A.  standard  deviation  of  Portfolio  P. 

B.  expected  return  on  the  minimum-variance  portfolio. 

C.  slope  of  the  line  connecting  T-bills  and  Portfolio  P. 

D.  point  at  which  the  straight  line  intersects  the  expected  return  axis. 

3.  At  a recent  analyst  meeting  at  Invest  Forum,  analysts  Michelle  White  and  Ted  Jones 
discussed  the  use  of  the  capital  market  line  (CML).  White  states  that  the  CML 
assumes  that  investors  hold  two  portfolios:  1 ) a risky  portfolio  of  all  assets  weighted 
according  to  their  relative  market  value  capitalizations;  and  2)  the  risk-free  asset. 
Jones  states  that  the  CML  is  useful  in  determining  the  required  rate  of  return  for 
individual  securities. 

Are  the  statements  of  White  and  Jones  correct? 

A.  Only  Jones’s  statement  is  correct. 

B.  Only  White’s  statement  is  correct. 

C.  Both  statements  are  correct. 

D.  Neither  statement  is  correct. 
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4.  Patricia  Franklin  makes  buy  and  sell  stock  recommendations  using  the  capital  asset 
pricing  model.  Franklin  has  derived  the  following  information  for  the  broad  market 
and  for  the  stock  of  the  CostSave  Company  (CS): 

• Expected  market  risk  premium  8% 

• Risk-free  rate  5% 

• Historical  beta  for  CostSave  1.50 

Franklin  believes  that  historical  betas  do  not  provide  good  forecasts  of  future  beta, 
and  therefore  uses  the  following  formula  to  forecast  beta: 

forecasted  beta  = 0.80  + 0.20  x historical  beta 

After  conducting  a thorough  examination  of  market  trends  and  the  CS  financial 
statements,  Franklin  predicts  that  the  CS  return  will  equal  10%.  Franklin  should 
derive  the  following  required  return  for  CS  along  with  the  following  valuation 
decision  (undervalued  or  overvalued): 


Valuation 

CAPM  required  return 

A. 

overvalued 

8.3% 

B. 

overvalued 

13.8% 

C. 

undervalued 

8.3% 

D. 

undervalued 

13.8% 

5. 


Albert  Dreiden  wants  to  estimate  the  expected  return  on  the  market.  He  believes 
that  the  stock  of  the  Hobart  Materials  Company  is  fairly  valued,  and  gathers  the 
following  information: 

• Expected  return  for  Hobart  7.50% 

• Risk-free  rate  4.50% 

• Beta  for  Hobart  0.80 


Based  on  this  information,  the  estimated  expected  return  for  the  market  portfolio  is 


closest  to: 

A. 

3.00%, 

B. 

3.75% 

C. 

6.90%, 

D. 

8.25% 
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Concept  Checker  Answers 


1 . D The  capital  asset  pricing  model  (CAPM)  assumes  that  all  assets  including  human  capital  are 

marketable.  Additionally,  CAPM  assumes  no  taxes,  no  transaction  costs,  and  that  investor 
actions  do  not  affect  market  prices. 

2.  C The  CML  is  the  line  connecting  T-bills  and  Portfolio  P.  The  market  price  of  risk  is  the 

slope  of  the  CML.  Had  risk  been  measured  on  the  graph  with  beta,  the  graph  would 
represent  the  SML.  The  market  price  of  risk  would  still  be  the  slope  of  the  line. 

3.  B The  CML  assumes  all  investors  have  identical  expectations  and  all  use  mean-variance 

analysis,  implying  that  they  all  identify  the  same  risky  tangency  portfolio  (the  “market 
portfolio”)  and  combine  that  risky  portfolio  with  the  risk-free  asset  when  creating  their 
portfolios.  Because  all  investors  hold  the  same  risky  portfolio,  the  weight  on  each  asset 
must  be  equal  to  the  proportion  of  its  market  value  to  the  market  value  of  the  entire 
portfolio.  Therefore,  White  is  correct.  The  CML  is  useful  for  determining  the  rate  of 
return  for  efficient  portfolios,  but  it  cannot  be  used  to  determine  the  required  rate  of 
return  for  inefficient  portfolios  or  individual  securities.  The  capital  asset  pricing  model 
(CAPM)  is  used  to  determine  the  required  rate  of  return  for  inefficient  portfolios  and 
individual  securities.  Therefore,  Jones  is  incorrect. 

4.  B The  CAPM  equation  is: 

E(Ri)^RF  + 0i[E(RM-RF)] 

Franklin  forecasts  the  beta  for  CostSave  as  follows: 
beta  forecast  = 0.80  + 0.20  (historical  beta) 
beta  forecast  = 0.80  + 0.20(1.30)  = 1.10 
The  CAPM  required  return  for  CostSave  is: 

0.03  + 1.1(0.08)  = 13.8% 

Note  that  the  market  premium,  E(RM)  - R,: , is  provided  in  the  question  (8%). 

Franklin  should  decide  that  the  stock  is  overvalued  because  she  forecasts  that  the  CostSave 
return  will  equal  only  10%,  whereas  the  required  return  (minimum  acceptable  return)  is 
13.8%. 

5.  D The  CAPM  equation  is: 

E(Rj)  = RF  + Pj[E(Rm  - Rf)] 

Using  the  given  information,  we  can  solve  for  the  expected  return  for  the  market  portfolio  as 
follows: 

7.50%  = 4.50%  + 0.80 [E(Rm)  - 4.50%] 

E(Rm)  = (7.50%  - 4.50%)  / 0.80  4-  4.50%  = 8.25% 

Based  on  the  information  given  and  using  the  CAPM,  the  expected  return  on  the  market  is 

8.25%. 
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objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

Applying  the  CAPM  to  Performance 
Measurement:  Single-Index 
Performance  Measurement 
Indicators 


Topic  10 


Exam  Focus 

This  topic  further  expands  on  the  concepts  of  the  capital  market  line  and  the  security  market 
line  by  examining  measures  used  to  assess  portfolio  performance  on  a risk-adjusted  basis. 

In  the  previous  topic,  we  mentioned  that  the  risk-to-reward  ratio  for  the  capital  market 
line  (i.e.,  its  slope)  is  known  as  the  Sharpe  ratio.  In  addition,  we  discussed  how  to  assess  a 
portfolios  alpha  return  when  comparing  actual  performance  to  expected  performance  based 
on  the  CAPM.  The  formal  expression  for  this  calculation  is  known  as  Jensens  alpha.  The 
Treynor  measure  is  another  popular  performance  metric,  and  is  similar  to  the  Sharpe  ratio 
but  uses  beta  as  the  risk  measure  instead  of  standard  deviation.  Toward  the  end  of  this  topic, 
we  examine  additional  risk-return  assessment  measures  such  as  the  information  ratio  and  the 
Sortino  ratio.  In  general,  all  of  the  performance  measures  introduced  evaluate  excess  return 
over  some  form  of  risk.  For  the  exam,  memorize  these  measures  of  performance  since  they 
are  popular  concepts  to  test. 


Measures  of  Performance 


LO  10.1:  Calculate,  compare,  and  evaluate  the  Treynor  measure,  the  Sharpe 
measure,  and  Jensens  alpha. 


Modern  portfolio  theory  and  the  CAPM  are  built  upon  the  link  between  risk  and  return. 
Three  measures  exist  to  assess  an  assets  or  portfolios  return  with  respect  to  its  risk. 

• The  Treynor  measure  is  equal  to  the  risk  premium  divided  by  beta,  or  systematic  risk: 
Treynor  measure  of  a portfolio  = 


E(Rp)-RF 

Pp 


• The  Sharpe  measure  is  equal  to  the 
total  risk: 

Sharpe  measure  of  a portfolio  = 


risk  premium  divided  by  the  standard  deviation,  or 

E(Rp)-Rf 

Op 
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• The  Jensen  measure  (or  Jensen’s  alpha  or  just  alpha),  is  the  assets  excess  return  over  the 
return  predicted  by  the  CAPM: 

Jensen  measure  of  a portfolio  = ap  = E(Rp)  - [Rf  + [E(RM)  - Rp]|3p] 


In  all  three  cases,  for  a given  portfolio,  the  higher,  the  better.  The  two  that  are  most  similar 
are  the  Treynor  and  Sharpe  measures.  They  both  normalize  the  risk  premium  by  dividing 
by  a measure  of  risk.  Investors  can  apply  the  Sharpe  measure  to  all  portfolios  because  it  uses 
total  risk,  and  it  is  more  widely  used  than  the  other  two  measures.  The  Treynor  measure 
is  more  appropriate  for  comparing  well-diversified  portfolios.  Jensens  alpha  is  the  most 
appropriate  for  comparing  portfolios  that  have  the  same  beta. 


Some  consider  the  Sharpe  measure  a better  method  for  measuring  historical  performance. 
Since  betas  must  be  estimated  and  the  portfolio  beta  is  the  weighted  average  of  the  betas  of 
assets  in  a portfolio,  the  Treynor  measure  is  considered  a more  forward-looking  measure. 


In  addition  to  these  comparisons,  it  is  useful  to  realize  that  some  relationships  exist  between 
the  measures.  For  instance: 

Treynor  measure  = — — + [E(R ^ ) - Rp  ] 

PP 


For  a well-diversified  portfolio  we  can  use  the  following  approximation:  (3p  « — — - 

°M 

Substituting  this  into  the  expression  for  Jensen’s  alpha  and  applying  some  algebra  gives  us: 

n _ aP  , E(Rm)- Rf 

Sharpe  measure  « 1 

(7p  tJM 


(Tp 

Applying  the  approximation  pP  « again  gives  us: 


Sharpe  measure  : 


Treynor  measure 


aM 


Professors  Note:  Do  not  focus  too  much  attention  on  these  approximations.  The  key 
to  this  LO  is  understanding  how  to  calculate  the  three  measures  of  performance  as  is 
shown  in  the  following  example . 
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Example:  Calculating  performance  measures 


For  a portfolio  of  ten  stocks,  we  may  find,  via  fundamental  analysis  estimates  of  the 
individual  stocks,  that  the  portfolio’s  expected  return  is  14%  with  a standard  deviation  of 
25%.  The  beta  of  the  portfolio  is  1.1.  The  expected  return  of  the  market  is  12.5%  with 
a standard  deviation  of  20.2%.  The  risk-free  rate  is  2.6%.  Calculate  the  Treynor,  Sharpe, 
and  Jensen  measures. 


Answer: 

Treynor  measure  = 


Sharpi 


e measure  = 


E(Rp)-Rp 

0.14-0.026 

Pp 

1.1 

E(Rp)-Rp 

0.14-0.026 

dp 

0.25 

= 0.1036 


= 0.456 


Jensen  measure  = otp  = E(RP)  [Rp  + [E(Rm)  — Rp]3p] 

= 0.14  — [0.026  + (0. 1 25  — 0.026)  (1.1)]  = 0.0051 

We  can  compare  these  to  the  corresponding  measures  of  the  market  portfolio: 

0.125-0.026 


Treynor  measure  of  the  market  = 


Sharpe  measure  of  the  market  * 


= 0.099 


0.4901 


Jensen  measure  of  a portfolio  = 0. 125  - [0.026  + (0.125  - 0.026)(1 )]  = 0.0 


Based  upon  the  Treynor  measure  and  the  Jensen  measure  of  the  preceding  example,  the 
portfolio  of  ten  stocks  is  superior  to  the  market.  However,  the  relationship  is  reversed  using 
the  Sharpe  measure.  This  implies  that  the  manager  has  selected  ten  stocks  that  offer  superior 
returns  relative  to  their  systematic  risk;  however,  a 10-stock  portfolio  is  much  less  diversified 
than  the  market.  The  standard  deviation  for  the  10-stock  portfolio  (<Tp  = 25%),  when 
compared  to  aM  = 20.2%,  reflects  the  lower  level  of  diversification. 

Extensions  to  Jensen’s  Alpha 

There  are  several  ways  to  modify  or  extend  the  Jensen  measure.  Since  Jensen’s  measure  is 
simply  a raw  return  in  excess  of  some  reference  (i.e.,  that  implied  by  the  CAPM  in  the  case 
of  the  standard  Jensen’s  measure)  we  can  simply  replace  that  reference  with  a value  that  we 
feel  is  more  appropriate.  One  reference  would  be  the  required  return  based  on  the  CML. 
The  manager  has  created  a portfolio  with  risk  ap  , which  then  has  a reference  return  equal 
to  E(Reference)  as  given  by  the  equation: 


E(R 


reference ' 


— Rp  + [E(Rm)-Rf] 


Op_ 

gm 
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The  alpha  in  this  case  would  be  the  portfolios  return  minus  the  reference  return: 
alpha  = E(Rp)  - E(Rleference) 

Other  extensions  of  Jensens  measure  would  use  a measure  of  E(Rreference)  derived  from  a 
multifactor  model  (i.e. , more  than  one  independent  variable).  Another  value  of  E(Rreference) 
could  be  derived  from  a variation  of  the  CAPM  called  the  Black  model,  which  uses  the 
return  on  a “zero-beta”  portfolio  in  place  of  the  risk-free  rate.  Tn  all  cases,  the  idea  is  the 
same:  measure  the  raw  return  difference  of  the  managed  portfolio  against  the  required 
return  given  its  level  of  risk. 


LO  10.2:  Compute  and  interpret  tracking  error,  the  information  ratio,  and  the 
Sortino  ratio. 


If  a manager  is  trying  to  earn  a return  higher  than  the  market  portfolio  or  any  other 
reference  or  benchmark,  the  difference  will  have  some  variability  over  time.  In  other  words, 
even  if  the  manager  is  successful  in  generating  a positive  alpha,  the  alpha  will  vary  over 
time.  Tracking  error  is  the  term  used  to  describe  the  standard  deviation  of  the  difference 
between  the  portfolio  return  and  the  benchmark  return.  This  source  of  variability  is  another 
source  of  risk  to  use  in  assessing  the  managers  success.  Typically,  the  manager  must  keep 
the  tracking  error  below  a stated  threshold.  The  manager  must  weigh  transactions  and  other 
costs  in  managing  the  portfolio  to  reduce  tracking  error  against  the  extra  risk  it  introduces 
into  the  management  process. 

The  information  ratio  is  essentially  the  alpha  of  the  managed  portfolio  relative  to  its 
benchmark  divided  by  the  tracking  error.  If  we  let  Rr  denote  the  return  of  the  benchmark 
we  can  write: 

ep  = Rp  - Rb 


tracking  error  = cr( 


eP 


information  ratio  = 


E(RP)  - E(Rb  ) 


ep 


_Op 

CT, 


ep 


This  is  a measure  used  to  assess  if  the  managers  deviation  from  the  benchmark  has  reaped 
an  appropriate  return.  It  is  called  an  “information  ratio”  because  it  is  essentially  a measure  of 
how  well  the  manager  has  acquired  and  used  information  compared  to  the  average  manager. 

Example:  Calculating  the  information  ratio 

A manager  typically  generates  an  alpha  of  1.5%  with  a tracking  error  of  2.25%.  Calculate 
the  information  ratio. 


Answer: 

information  ratio  = 


1.5 


2.25 


: 0.667 
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The  Sortino  ratio  is  similar  to  the  Sharpe  ratio  except  for  two  changes.  We  replace  the 

risk-free  rate  with  a minimum  acceptable  return,  denoted  R . , and  we  replace  the  standard 

deviation  with  a type  of  semi-standard  deviation.  A semi-standard  deviation  measures 

the  variability  of  only  those  returns  that  fall  below  the  minimum  acceptable  return.  The 

measure  of  risk  in  the  Sortino  ratio  is  the  square  root  of  the  mean  squared  deviation  from 

Rmin  th°se  observations  in  time  periods  t where  Rpc  < Rmin,  else  zero.  Letting  Rmin  denote 

the  minimal  acceptable  return  and  MSD  . the  risk  measure: 
c min 


Sortino  ratio  = 


E(Rp)-  Rmin 

a/MSD~ 


where: 


MSDmin  - 


E (Rpt-Rmm)2 


RPt<Rmir 


N 


The  Sortino  ratio  can  be  interpreted  as  a variation  of  the  Sharpe  ratio  that  is  more 
appropriate  for  a case  where  returns  are  not  symmetric. 


Example:  Calculating  the  information  ratio  and  the  Sortino  ratio 

Over  a 10-year  period,  a manager  uses  a covered  call  strategy  to  enhance  the  return  of 
the  index  fund  she  manages.  The  record  of  the  fund’s  returns  is  (0.095,  0.08,  -0.022, 

0. 1 1 , 0.09,  -0.05,  -0.035,  0. 124,  0.072,  0.055).  The  corresponding  benchmark  returns 
record  is  (0.087,  0.078,  -0.034,  0.124,  0.10,  -0.064,  -0.042,  0.131,  0.062,  0.039).  The 
minimum  acceptable  return  is  4%.  Calculate  the  information  ratio  and  the  Sortino  ratio. 
Assume  tracking  error  = 0.00992  and  mean  squared  deviation  (min)  = 0.0017569. 

Answer: 

If  we  were  to  compute  the  tracking  error,  the  first  step  would  be  to  compute  the 
differences  between  the  portfolio  and  the  benchmark.  Those  differences  are:  (0.008, 
0.002,  0.012,  -0.014,  -0.01,  0.014,  0.007,  -0.007,  0.01,  -0.004).  The  tracking  error  is 
the  standard  deviation  of  these  numbers. 


Professors  Note:  In  Book  2 , we  will  examine  the  formula  for  standard  deviation 
that  is  used  for  the  tracking  error  calculation.  It  is  based  on  the  sum  of  the 
squared  differences  between  each  data  point  and  the  mean.  This  sum  is  divided 
by  the  number  of  observations  adjusted  for  degrees  of freedom  (in  this  case 
n - I).  The  square  root  of  the  computed  value  will  be  the  standard  deviation. 


To  compute  the  information  ratio,  divide  the  mean  of  the  differences  by  the  tracking 


information  ratio  = 0.0018  / 0.00992  = 0.1815 
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The  Sortino  ratio  is  the  mean  of  the  ten  portfolio  returns  minus  4%,  which  is 
0.0519  - 0.04  = 0.01 19,  divided  by  the  square  root  of  MSDmin. 

MSD  . =0.0017569 

min 

Sortino  ratio  = 0.0119  / 0.0419  - 0.2840 
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Key  Concepts 


LO  10.1 

Three  commonly  used  risk/return  measures  are: 
• Treynor  measure  of  a portfolio  = 


E(RP)-RF 


Sharpe  measure  of  a portfolio  = 


(3P 

E(RP)-Rr 

Op 


• Jensen  measure  of  a portfolio  = ap  = E(Rp)  - [Rj:  + [E(RM)  - Rp]pp] 

The  three  risk  measures  above  give  different  perspectives  and  may  give  different  rankings  for 
portfolios.  A portfolio  with  low  diversification  may  have  a higher  Treynor  measure,  a higher 
alpha,  but  a lower  Sharpe  measure  than  another  portfolio. 

Alpha  can  be  modified  by  the  use  of  other  reference  portfolios. 


LO  10.2 

Tracking  error  and  the  information  ratio  build  upon  Jensens  alpha.  Tracking  error  is  the 
standard  deviation  of  alpha  over  time.  The  information  ratio  is  the  average  alpha  over  time 
divided  by  the  tracking  error. 

The  Sortino  ratio  should  be  used  when  there  is  more  focus  on  the  likelihood  of  loss: 


c • • E(Rp)-Rmin 

Sortino  ratio  = — - 

V MSDmin 

The  MSDmin  is  a semi-variance  that  only  measures  the  variability  of  the  portfolio’s  return 
observations  below  R 

min 
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Concept  Checkers 


1.  For  a given  portfolio,  having  a Treynor  measure  greater  than  the  market  but  a Sharpe 
measure  that  is  less  than  the  market  would  most  likely  indicate  that  the  portfolio  is: 

A.  not  well  diversified. 

B.  generating  a negative  alpha. 

C.  borrowing  at  the  risk-free  rate. 

D.  not  borrowing  at  the  risk-free  rate. 

2.  With  respect  to  performance  measures,  the  use  of  the  standard  deviation  of  portfolio 
returns  is  a distinguishing  feature  of  the: 

A.  beta  measure. 

B.  Jensen  measure. 

C.  Sharpe  measure. 

D.  Treynor  measure. 

3.  For  a given  portfolio,  the  expected  return  is  9%  with  a standard  deviation  of  16%. 
The  beta  of  the  portfolio  is  0.8.  The  expected  return  of  the  market  is  12%  with  a 
standard  deviation  of  20%.  The  risk-free  rate  is  3%.  The  portfolios  alpha  is: 

A.  -1.2%. 

B.  -0.6%. 

C.  +0.6%. 

D.  +1.2%. 

4.  You  are  given  the  following  information: 


Risk-free  rate  4% 

Minimum  acceptable  return  6% 

Benchmark  return  10% 

Expected  return  on  portfolio  12% 

Expected  return  on  market  9% 

Beta  1.23 

Standard  deviation  (portfolio)  7.3% 

Semi-standard  deviation  (portfolio)  8.2% 


The  Sortino  ratio  of  the  portfolio  is  closest  to: 

A.  0.24. 

B.  0.73. 

C.  0.82. 

D.  0.98. 
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An  analyst  has  compiled  the  following  data  on  Stock  P: 


Calculate  and  interpret  Jensens  Alpha  for  Stock  R 

A.  -*-1.47%  overperformed. 

B.  -1 .47%  underperformed. 

C.  +1.45%  overperformed. 

D.  -1.45%  underperformed. 


Covariance,,  marlcet 


0.0315 

16.50% 

15.00% 

11.80% 

4.50% 

13.25% 


Expected  market  return 
Risk-free  rate 
Stock  P actual  return 
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Concept  Checker  Answers 


1 . A Low  diversification  can  produce  this  result  because  it  will  likely  increase  the  standard 

deviation  of  the  portfolio’s  returns,  thus  decreasing  its  Sharpe  ratio.  Using  margin  is  not 
directly  related  to  the  risk- adjusted  performance  because  adjusting  for  risk  removes  the  effect 
of  leverage.  ATreynor  ratio  greater  than  the  market  Treynor  ratio  would  result  in  a positive 
alpha  (not  a negative  alpha). 

2.  C The  Sharpe  measure  is  the  portfolio  return  minus  the  risk-free  rate  divided  by  the  standard 

deviation  of  the  return.  The  Treynor  and  Jensen  measures  use  beta.  The  answer  “beta 
measure”  is  a nonsensical  choice  for  this  question. 

3.  A The  alpha  is  9%  - [3%  + 0.8  x (12%  - 3%)]  = -1.2%. 

4.  B (portfolio  return  - minimum  acceptable  return)  / semi-standard  deviation 

(0.12 -0.06)/  0.082  = 0.7317 

Choice  A is  incorrect  because  it  uses  the  benchmark  return  in  the  numerator  instead  of  the 
minimum  acceptable  return. 

Choice  C is  incorrect  because  it  uses  the  standard  deviation  in  the  denominator  instead  of 
the  semi-standard  deviation. 

Choice  D is  incorrect  because  it  uses  the  risk-free  rate  in  the  numerator  instead  of  the 
minimum  acceptable  return. 

5.  B Jensen's  Alpha  = actual  return  - CAPM  expected  return 

CAPM:  E(R)  = Rf  + p(RM  - RF) 
p = covarianceP>mafkeI 

VarianCe  market 

Step  1:  Calculate  |3 

P = 0.0315  /0.152  p = 1.4 

Step  2:  Calculate  the  CAPM  expected  return 

E(R)  = 4.5  + 1.4(11.80-4.5)=  14.72% 

Step  3:  Calculate  Jensen’s  Alpha 

Jensen’s  Alpha  = actual  return  - CAPM  E(R)  = 13.25%  - 14.72%  = -1.47% 

Stock  P has  underperformed  the  market  by  1.47%  when  taking  into  account  its  level  of 
systematic  risk  as  measured  by  beta. 
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The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

Arbitrage  Pricing  Theory  and 
Multifactor  Models  of  Risk  and 
Return 


Topic  1 1 

Exam  Focus 

The  relationship  between  risk  and  return  is  one  of  the  most  important  concepts  in  finance. 
The  capital  asset  pricing  model  (CAPM)  asserts  that  the  expected  return  on  any  asset  is 
solely  determined  by  its  exposure  to  the  market  portfolio.  The  risk  exposure  in  the  CAPM  is 
known  as  beta.  In  contrast,  the  arbitrage  pricing  theory  (APT)  asserts  that  expected  returns 
are  determined  by  exposures  to  economy-wide  risk  factors.  The  risk  exposures  in  the  APT  are 
known  as  factor  betas.  For  the  exam,  be  able  to  calculate  expected  returns  using  single-factor 
and  multifactor  models.  In  addition,  know  how  to  construct  the  security  market  line  (SML) 
for  a well- diversified  portfolio  using  a single-factor  model.  Also,  be  able  to  explain  the  APT, 
and  know  how  to  construct  a portfolio  to  hedge  exposure  to  multiple  risk  factors. 


The  Multifactor  Model  of  Risk  and  Return 


LO  11.1:  Describe  the  inputs,  including  factor  beta,  to  a multi-factor  model. 


The  inputs  to  a multifactor  model,  for  any  stock,  are  as  follows: 

• Expected  return  for  the  stock. 

• Factor  betas,  also  known  as  factor  sensitivities  or  factor  loadings. 

• Deviation  of  macroeconomic  factors  from  their  expected  values. 

• Firm-specific  return. 

The  equation  for  a multifactor  model  for  stock  i can  be  expressed  as  follows: 

Rj  = E(R;)  + 0i]F1  + (3i2F2  + ...  + PiitFlc  + ej 


where: 

Rf  = return  on  stock  i 
E(R)  = expected  return  for  stock  / 

(3j.  = yxh  factor  beta  for  stock  i 

Fj  = deviation  of  macroeconomic  factory  from  its  expected  value 
ej  = firm-specific  return  for  stock  i 

Regarding  macroeconomic  factors,  assume  that  one  of  the  macro  factors  is  gross  domestic 
product  (GDP).  In  this  case,  FGDp  will  represent  the  deviation  of  GDP  from  its  expected 
value.  If  we  assume  that  the  consensus  forecast  for  GDP  equals  3%,  and  GDP  for  the 
period  ended  up  being  4%,  FGDp  would  equal  0.01  (0.04  - 0.03  = 0.01). 
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The  factor  beta,  3,,,  equals  the  sensitivity  of  the  stock  return  to  a 1-unit  change  in  the 
factor.  For  example,  for  stock  /,  assume  GDP  = 2.  Therefore,  for  every  one  percentage 
point  change  in  GDP,  this  stocks  return  changes,  on  average,  by  two  percentage  points. 

The  firm-specific  return,  ei?  is  the  portion  of  the  stock’s  return  that  is  unexplained  by  macro 
factors  (i.e.,  the  F terms  in  the  equation).  The  firm-specific  return  will  be  a nonzero  value 
whenever  unexpected  firm-specific  events  take  place  (e.g.,  a strike  that  impacts  a single 
firm).  However,  the  expected  value  of  the  firm-specific  return  equals  zero,  because,  by 
definition,  firm-specific  events  are  random. 


Professor’s  Note:  For  the  moment,  we  will  assume  that  the  expected  return, 
E(R  ),  is  known . Later,  we  will  use  the  arbitrage  pricing  theory  to  derive  the 
expected  return.  In  that  case,  the  factor  betas  will  be  estimated  as  the  slope 
coefficients  in  a multiple  linear  regression. 


LO  1 1.2:  Calculate  the  expected  return  of  an  asset  using  a single-factor  and  a 
multi-factor  model. 


The  factor  model  just  described  can  be  used  to  revise  the  estimate  of  a stock’s  expected  rate 
of  return.  The  number  of  factors  to  include  in  a factor  model  should  be  as  small  as  possible, 
yet  still  capture  the  priced  sources  of  nondiversifiable  (or  systematic)  risk.  The  simplest 
version  of  the  model  consists  of  just  one  macro  factor:  the  single-factor  model.  We  will 
consider  examples  of  a single-factor  model  first,  and,  then,  will  consider  a 2-factor  model. 

For  the  first  example,  assume  the  common  stock  of  Healthcare  Inc.  (HCI)  is  examined 
with  a single-factor  model,  using  unexpected  percent  changes  in  GDP  as  the  single  factor. 
Assume  the  following  data  is  provided: 


Expected  return  for  HCI  - 10% 

GDP  factor  beta  = 2.00 

Expected  GDP  growth  = 3% 

Given  this  data,  we  can  see  that  the  stock  return  for  HCI  is  strongly  impacted  by  GDP  On 
average,  the  stock  price  changes  by  two  percentage  points  for  every  one  percentage  point 
change  in  GDP. 

Suppose  new  macroeconomic  information  indicates  that  GDP  growth  will  equal  4% 
rather  than  the  original  consensus  forecast  of  3%.  Also  assume  there’s  no  new  information 
regarding  firm-specific  events.  The  revised  expected  return  for  HCI  using  a single-factor 
model  can  be  calculated  as  follows: 


RHCI  = k(RHCl)  + pHCI.GDP^GDP  + eHGI 

Rhci  = ai°  + 2(0.01)  = 0.12  = 12% 

Therefore,  based  on  the  single-factor  model,  the  analyst  should  revise  the  expected  return 
for  HCI  from  10%  to  12%,  because  GDP  was  revised  above  its  original  expected  value.  The 
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additional  two  percentage  points  resulted  from  the  one  percentage  point  deviation  of  GDP 
from  its  expected  value,  combined  with  the  GDP  factor  beta  of  2:  2 x 0.01  = 0.02  = 2%. 

For  the  second  example,  assume  the  common  stock  of  HealthCare  Inc.  (HCI)  is  examined 
using  a multifactor  model,  based  on  two  factors:  unexpected  percent  changes  in  GDP  and 
unexpected  percent  changes  in  consumer  sentiment.  Assume  the  following  data  is  provided: 


Expected  return  for  HCI  = 10% 

GDP  factor  beta  = 2.00 

Consumer  sentiment  (CS)  factor  beta  =1.50 
Expected  growth  in  GDP  = 3% 

Expected  growth  in  consumer  sentiment  =1% 


Suppose  new  macroeconomic  information  indicates  that  GDP  will  grow  4%  rather  than 
3%,  and  that  consumer  sentiment  will  grow  3%  rather  than  1%.  A 2-factor  model  to 
calculate  the  return  for  HCI  can  be  expressed  as  follows: 

RHCI  = ^(Rhci)  + PhCI,GDP^GDP  + PhCI,CS^CS  + eHCI 

rhci  = °-10  + 2(°-01)  + 1.5(0.02)  = 0.15  = 15% 

Therefore,  based  on  this  multifactor  model,  the  revised  estimate  of  the  expected  return  for 
HCI  equals  15%,  which  is  five  percentage  points  higher  than  initially  expected.  The  sources 
of  the  revised  return  are  the  macroeconomic  revisions  to  GDP  and  consumer  sentiment. 

The  Law  of  One  Price  and  Arbitrage  Opportunities 


LO  11.3:  Interpret  the  Law  of  One  Price  and  assess  whether  an  arbitrage  situation 
exists  using  a multi-factor  model. 


According  to  the  Law  of  One  Price,  identical  assets  selling  in  different  locations  should 
be  priced  identically  in  the  different  locations.  For  example,  assume  the  common  stock  of 
GH  Inc.  is  listed  on  both  the  NYSE  and  NASDAQ.  According  to  the  Law  of  One  Price, 
there  should  be  no  difference  in  the  stock  prices  of  GHs  transactions  on  the  NYSE  versus 
NASDAQ.  If  there  were  different  prices  available,  an  arbitrage  opportunity  would  exist.  For 
example,  assume  the  stock  price  for  GH  on  the  NYSE  is  $60,  and  assume  the  stock  price 
for  GH  on  NASDAQ  is  $58.  In  this  case,  investors  could  buy  GHs  stock  on  NASDAQ  for 
$58  and  simultaneously  sell  the  stock  for  $60  on  the  NYSE.  These  actions  would  continue 
until  the  stock  prices  are  identical  on  the  two  exchanges. 

The  action  of  buying  an  asset  in  the  cheaper  market  and  simultaneously  selling  that  asset 
in  the  more  expensive  market  is  called  arbitrage.  The  actions  of  arbitrageurs  cause  prices  to 
rise  in  the  cheaper  market  and  fall  in  the  expensive  market.  The  simultaneous  trades  will 
continue  until  the  asset  trades  at  one  price  in  both  markets,  at  which  point  the  arbitrage 
opportunity  will  be  fully  exploited. 
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The  Law  of  One  Price  can  be  extended  to  different  assets  that  have  identical  risks.  The 
following  example  illustrates  whether  an  arbitrage  situation  exists  using  a multifactor  model. 
Assume  a 2-factor  model  is  used  to  examine  the  returns  for  two  assets,  A and  B.  Also, 
assume  the  two  factors  are  unexpected  percentage  changes  in  GDP  and  consumer  sentiment 
(CS). 

Ra  - E(Ra)  + Pa,gdp^gdp  + Pacs^cs  + eA 
Rg  = E(Rg)  + Pb,GDP^GDP  + Pb.CS^CS  + eB 

Additional  data: 

E(Ra)  = 0.12 
E(Rb)  = 0.10 

Pa, GDP  = Pb,GDP  = 2 

Pa, cs  = Pb, cs  = 

Notice  that  the  factor  betas  are  identical  for  Asset  A and  Asset  B.  Therefore,  the  systematic 
risks  are  identical  between  these  assets.  If  the  systematic  risks  of  two  assets  are  identical, 
then  the  expected  returns  for  the  two  assets  should  also  be  identical. 

In  this  example,  an  arbitrage  opportunity  exists  because  the  assets  are  priced  based  on 
different  expected  returns  even  though  the  systematic  risks  of  the  two  assets  are  identical. 

An  investor  can  exploit  the  arbitrage  opportunity  by  shorting  Asset  B and  using  the 
proceeds  from  the  short  position  to  take  a long  position  in  Asset  A.  The  expected  return  and 
factor  betas  for  the  long-short  hedge  portfolio,  H,  are  calculated  as  follows: 

E(Rh)  = E(Ra)  - E(Rb)  = 0.12  - 0.10  = 0.02 
Ph,GDP  = Pa, GDP  “ Pb,GDP  = 0 
Ph, CS  = Pa,CS  “ Pb, CS  = 0 

Therefore,  the  net  investment  in  Portfolio  H is  zero  (invest  $1  in  Asset  A for  every  $1  sold 
short  in  Asset  B),  the  net  position  for  Portfolio  H is  riskless  (i.e.,  factor  betas  are  zero),  but 
the  expected  profit  from  Portfolio  H is  positive  (equal  to  2%).  These  conditions  constitute 
an  arbitrage  situation. 

Well-Diversified  Portfolios 


LO  11.4:  Describe  properties  of  well-diversified  portfolios  and  explain  the  impact 
of  diversification  on  the  residual  risk  of  a portfolio. 


The  part  of  an  individual  security’s  risk  that  is  uncorrelated  with  the  volatility  of  the  market 
portfolio  is  that  security’s  nonsystematic  risk  (or  diversifiable  risk).  The  part  of  an  individual 
security’s  risk  that  arises  because  of  the  positive  covariance  of  that  security’s  returns  with 
overall  market  returns  is  called  its  systematic  risk.  As  the  number  of  securities  in  a portfolio 
becomes  large,  the  portfolios  nonsystematic  risk  approaches  zero.  In  other  words,  portfolio 
risk  reduction  through  diversification  comes  from  reducing  nonsystematic  risk.  Therefore, 
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when  a risky  security  is  added  to  a well-diversified  (efficient)  portfolio,  the  portfolio’s  risk  is 
only  affected  by  the  systematic  risk  of  that  security. 

The  standardized  measure  of  systematic  risk  is  beta,  standardized  into  units  of  market  risk, 
which  is  the  risk  of  holding  the  market  portfolio  (often  represented  by  the  S&P  500  Index). 

Recall  from  Topic  9 that  beta  is  calculated  as  the  covariance  of  the  returns  on  security  or 
portfolio  i with  the  returns  on  the  market  portfolio,  divided  by  the  variance  of  the  returns 
on  the  market  portfolio. 

Because  nonsystematic  (diversifiable)  risk  can  be  avoided  (without  cost)  by  efficient 
diversification,  there  is  no  added  expected  return  for  bearing  nonsystematic  risk.  This  result 
is  the  crucial  point  of  the  capital  asset  pricing  model  (CAPM)  and  is  expressed  in  the 
equation  of  the  security  market  line  (SML).  As  we  saw  in  previous  topics,  this  relation  says 
that,  for  each  unit  of  market  risk  (beta),  investors  can  expect  to  receive  a premium  over  the 
risk-free  rate  equal  to  the  market  risk  premium. 


The  Single-Factor  Security  Market  Line 

Assume  we  create  a well- diversified,  observable,  market  index  portfolio,  M.  Index  M can 
be  any  well-diversified  portfolio  thought  to  be  highly  correlated  with  the  systematic  factor 
that  affects  the  returns  of  assets.  Also,  assume  that  we  use  a single-factor  model  in  which  the 
factor  is  the  unexpected  return  on  the  market  index  portfolio.  In  this  case,  the  beta  of  the 
market  index  is  equal  to  one.  Portfolio  M must  lie  on  the  line  illustrated  in  Figure  1,  which 
is  known  as  the  single-factor  security  market  line  (SML). 


Figure  1 : The  Single-Factor  Security  Market  Line 


The  implication  of  the  single-factor  security  market  line  is  that,  when  no  arbitrage 
opportunities  exist,  all  well-diversified  portfolios  must  lie  on  the  line. 

To  derive  the  equation  for  the  single-factor  SML,  note  that  the  intercept  of  the  line  is  the 
risk-free  rate,  Rp,  and  the  slope  of  the  line  is  the  market  index  risk  premium,  E(RM)  — Rp. 
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The  equation  for  the  line  (for  any  well-diversified  Portfolio  P)  is: 


E(Rp)  - RF  + (3P[E(RM)  - RF] 


where  M is  an  observable,  well-diversified,  market  index,  and  (3p  is  the  beta  of  any  portfolio, 
P,  relative  to  the  market  index,  M. 

The  equation  is  analogous  to  the  CAPM.  The  key  difference  is  that  the  CAPM  relies  on  the 
existence  of  the  mean-variance  efficient  market  portfolio  (i.e.,  an  unobservable  portfolio 
that  lies  on  the  efficient  frontier,  and  consists  of  all  marketable  assets).  In  contrast,  the 
equation  for  the  single-factor  security  market  line  merely  relies  on  the  assumptions  that 
security  returns  can  be  explained  by  a single-factor  model,  that  well-diversified  portfolios 
can  be  created,  and  that  no  arbitrage  opportunities  exist. 

Hedging  Exposures  to  Multiple  Factors 


LO  1 1.5:  Explain  how  to  construct  a portfolio  to  hedge  exposure  to  multiple 
factors. 


Consider  an  investor  who  manages  a portfolio  with  the  following  factor  betas: 

GDP  beta  =0.50 

Consumer  sentiment  beta  = 0.30 

Assume  the  investor  wishes  to  pursue  strategies  to  hedge  exposure  to  GDP  risk,  or  to 
consumer  sentiment  risk,  or  to  both  factor  risks.  The  following  explanation  makes  use  of 
what  are  called  factor  portfolios,  which  are  well-diversified  portfolios  with  betas  equal  to 
one  for  a single  risk  factor  and  betas  equal  to  zero  on  all  remaining  factors.  For  example,  the 
GDP  factor  portfolio  is  a well-diversified  portfolio  designed  to  have  a GDP  beta  of  one  and 
a consumer  sentiment  beta  of  zero.  And,  the  consumer  sentiment  factor  portfolio  is  a well- 
diversified  portfolio  designed  to  have  a consumer  sentiment  beta  of  one  and  a GDP  beta  of 
zero. 

Now,  assume  the  investor  wishes  to  hedge  away  GDP  factor  risk,  yet  maintain  the 
0.30  exposure  to  consumer  sentiment.  To  do  so,  the  investor  should  combine  the  original 
portfolio  with  a 50%  short  position  in  the  GDP  factor  portfolio.  The  GDP  factor  beta  on 
the  50%  short  position  in  the  GDP  factor  portfolio  equals  -0.50,  which  perfectly  offsets 
the  0.50  GDP  factor  beta  on  the  original  portfolio.  The  combined  long  and  short  positions 
hedge  away  GDP  risk  but  retain  the  consumer  sentiment  exposure. 

Alternatively,  the  investor  might  want  to  hedge  away  consumer  sentiment  (CS)  factor  risk, 
yet  maintain  the  0.50  exposure  to  GDP.  To  do  so,  the  investor  should  combine  the  original 
portfolio  with  a 30%  short  position  in  the  CS  factor  portfolio.  The  CS  factor  beta  on  the 
30%  short  position  in  the  CS  factor  portfolio  equals  -0.30,  which  perfectly  offsets  the 
0.30  CS  factor  beta  on  the  original  portfolio.  The  combined  long  and  short  positions  hedge 
away  CS  risk  but  retain  the  GDP  exposure. 
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Finally,  what  if  the  investor  wants  to  hedge  away  both  factor  risks?  To  do  so,  first,  the 
investor  should  form  a portfolio  invested  50%  in  the  GDP  factor  portfolio  and  30%  in  the 
CS  factor  portfolio  (and  the  remaining  20%  in  the  risk-free  asset).  This  portfolio  can  be 
referred  to  as  Portfolio  H,  which  can  be  used  to  hedge  away  the  factor  risks  of  the  original 
portfolio.  To  hedge  away  the  factor  risks  of  the  original  portfolio,  the  investor  can  combine 
the  original  portfolio  with  a short  position  in  the  hedge  portfolio,  H.  That  way,  the  original 
portfolio  factor  betas  (0.50  and  0.30,  respectively)  are  perfectly  offset  by  the  short  position 
in  the  hedge  portfolio. 

The  hedging  process  can  also  be  used  to  exploit  an  arbitrage  opportunity.  Assume  that  the 
original  portfolio  expected  return  is  12%  and  that  the  hedge  portfolio  return  equals  10%. 

In  this  case,  the  investor  can  take  a long  position  in  the  original  portfolio  combined  with 
a short  position  in  the  hedge  portfolio,  resulting  in  a 2%  arbitrage  profit.  Conversely,  if 
the  hedge  portfolio  return  instead  equals  1 4%,  the  investor  can  take  a long  position  in  the 
hedge  portfolio  combined  with  a short  position  in  the  original  portfolio,  resulting  in  a 2% 
arbitrage  profit. 


The  Arbitrage  Pricing  Theory 


LO  11.6:  Compare  the  Arbitrage  Pricing  Theory  (APT),  the  CAPM,  and  the 
Fama-French  three-factor  model,  and  evaluate  the  underlying  assumptions  of  each. 


The  arbitrage  pricing  theory  (APT)  describes  expected  returns  as  a linear  function  of 

exposures  to  common  (i.e.,  macroeconomic)  risk  factors: 

E(Rj)  = Rf  + |3ilRP1  + + ...+  (3ikRPk 

where  RP.  is  the  risk  premium  associated  with  risk  factor  j.  The  risk  premiums  are  derived 

as  follows: 

Step  1:  Create  factor  portfolios.  Each  factor  portfolio  is  a well-diversified  portfolio 

(e.g.,  nonsystematic  risk  is  zero)  that  has  a beta  equal  to  one  for  a single  risk  factor, 
and  betas  equal  to  zero  on  the  remaining  factors.  Repeat  the  process  for  all  k factors 
in  the  multifactor  model  so  that  a factor  portfolio  is  derived  for  each  of  the  risk 
factors. 

Step  2:  Derive  returns  for  each  factor  portfolio.  For  instance,  define  E(Rj)  as  the  expected 
return  on  Factor  Portfolio  1,  E(R2)  as  the  expected  return  on  Factor  Portfolio  2, 
and  so  on. 

Step  3:  Calculate  risk  premiums  for  each  factor  portfolio.  For  example,  the  risk  premium 
for  Factor  Portfolio  1 equals  E(R])  - Rp,  the  risk  premium  for  Factor  Portfolio  2 
equals  E(R2)  - Rp,  and  so  on. 

Given  the  derivation  of  the  risk  premiums,  the  APT  model  can  be  rewritten  as: 


E(R)  = RF  + (3il[E(R1)  - Rf]  + f3i2[E(R2)  - RF]  +...+  Pik[E(Rk)  - RF] 
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The  assumptions  underlying  the  APT  model  are  as  follows: 

• Returns  follow  a £- factor  process:  Rj  = E(Rj)  + fyjFj  + (3i2F2  + •••  + Pik^k  + ei* 

• Well-diversified  portfolios  can  be  formed. 

• No  arbitrage  opportunities  exist. 

Professor’s  Note:  The  main  conclusion  of  the  APT  is  that  if  these  three 
assumptions  hold,  then  expected  returns  on  well-diversified  portfolios  are 
proportional  to  their  factor  betas.  However,  we  cannot  conclude  that  the  APT 
relationship  will  hold  for  ALL  securities.  For  example,  if  the  APT  relation 

©is  violated  for,  say,  one  security  in  the  portfolio , its  effect  will  be  too  small  to 

produce  meaningful  arbitrage  opportunities  for  the  portfolio.  Therefore,  we  can 
conclude  that  the  APT  relation  can  hold  for  well-diversified  portfolios  even  if 
it  does  not  hold  for  all  securities  in  the  portfolio.  But,  the  APT  relation  must 
hold  for  nearly  all  securities  in  a well-diversified  portfolio , or  else  arbitrage 
opportunities  will  become  available  for  the  portfolio.  Therefore,  we  can 
conclude  that  the  APT  relation  must  hold  for  NEARLY  all  securities. 


Example:  Compute  expected  return  using  the  APT  model 


Assume  the  following  data  for  Asset  Z: 

Risk-free  rate  = 5% 

GDP  factor  beta  = 0.50 

Consumer  sentiment  factor  beta  = 0.30 

GDP  risk  premium  = 4% 

Consumer  sentiment  risk  premium  - 3% 


Calculate  the  expected  return  for  Asset  Z using  a 2-factor  APT  model. 
Answer: 

E(RZ)  = 0.05  + 0.5(0.04)  + 0.3(0.03)  = 0.079  = 7.9% 


Both  the  arbitrage  pricing  theory  model  and  the  capital  asset  pricing  model  describe 
equilibrium  expected  returns  for  assets.  In  fact,  the  CAPM  can  be  considered  a special 
restrictive  case  of  the  APT  in  which  there  is  only  one  risk  factor  (the  market  risk  factor). 

The  Fama- French  Three-Factor  Model 

A major  weakness  of  the  APT  is  that  it  offers  no  guidance  as  to  the  identification  of  the 
appropriate  risk  factors.  More  recently,  a competing  model  has  been  developed  by  Professors 
Eugene  Fama  and  Kenneth  French.  In  contrast  to  the  APT  model,  the  Fama-French  model 
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identifies  the  factors.  In  addition  to  the  market  return  factor  (RM  — R^),  the  Fama-French 
three-factor  model  specifies  the  following  two  factors: 

• SMB  (small  minus  big)  is  the  firm  size  factor  equal  to  the  difference  in  returns  between 
portfolios  of  small  and  big  firms  (Rs  - RB). 

• HML  (high  minus  low)  is  the  book-to-market  (i.e.,  book  value  per  share  divided  by 
stock  price)  factor  equal  to  the  difference  in  returns  between  portfolios  of  high  and  low 
book-to-market  firms  (RH  - RL). 

Notice  that  SMB  is  a hedge  strategy  long  small  firms  and  short  big  firms.  Likewise,  HML  is 
a hedge  strategy  long  high  book-to-market  firms  and  short  low  book-to-market  firms. 

The  equation  for  the  Fama-French  three-factor  model  is: 

R - Rf  - ol{  + Tm^m  “ Rf)  + Pi.SMB^MB  + + ei 

The  intercept  term  (i.e.,  alpha)  equals  the  abnormal  performance  of  the  asset  after 
controlling  for  its  exposures  to  the  market,  firm  size,  and  book-to-market  factors.  In 
equilibrium,  the  intercept  should  equal  zero,  assuming  the  Fama-French  three  factors 
adequately  capture  all  systematic  risks. 

The  SMB  and  HML  factors  are  chosen  because  history  shows  that  returns  are  higher  on 
small  versus  big  firms  and  on  high  versus  low  book-to-market  firms.  Fama  and  French  argue 
that  these  differences  exist  because  small  firms  are  inherently  riskier  than  big  firms,  and  that 
high  book-to-market  firms  are  inherently  riskier  than  low  book-to-market  firms. 
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Key  Concepts 


LO  11.1 

The  inputs  to  a multifactor  model,  for  any  stock,  are: 

• Expected  return  for  the  stock. 

• Factor  betas. 

• Deviation  of  macroeconomic  factors  from  their  expected  values. 

• Firm-specific  return. 

The  factor  beta  equals  the  sensitivity  of  the  stock  return  to  a 1-unit  change  in  the  factor. 
The  firm-specific  return  is  that  portion  of  the  stocks  return  that  is  unexplained  by  the 
macro  factors.  The  expected  value  of  the  firm-specific  return  equals  zero,  because,  by 
definition,  firm-specific  events  are  random. 


LO  11.2 

The  equation  for  a ^-factor  model  is:  R = E(R)  + 31F1  + 32F7  + ...  + 3kFk+  e.  The  return 
equals  its  expected  value  if  none  of  the  macro  factors  deviate  from  their  expected  values  and 
if  the  firm-specific  return  equals  zero.  If  macro  factor  Fj  deviates  from  its  expected  value, 
then  Fj  is  nonzero.  If  the  firm  experiences  a nonfactor  related  surprise,  then  the  firm-specific 
component,  e,  will  be  nonzero.  The  multifactor  model  can  be  used  to  calculate  the  expected 
return  after  new  macroeconomic  and/or  firm-specific  information  is  released. 


LO  11.3 

According  to  the  Law  of  One  Price,  two  assets  with  identical  factor  betas  should  have 
identical  expected  returns.  An  arbitrage  situation  arises  whenever  the  Law  of  One  Price 
is  violated.  By  definition,  an  arbitrage  situation  exists  whenever  a risk-free,  zero  net 
investment,  profitable  opportunity  exists.  If  the  Law  of  One  Price  is  violated,  investors 
(called  arbitrageurs)  will  buy  the  asset  with  the  higher  expected  return  and  simultaneously 
short  sell  the  asset  with  the  lower  expected  return.  The  profit  earned  equals  the  difference 
in  the  two  expected  returns.  The  arbitrage  strategy  is  risk-free  because  the  factor  betas  on 
the  long  position  are  offset  by  the  factor  betas  on  the  short  position.  The  net  investment  of 
the  arbitrage  strategy  is  zero  because  the  amount  spent  on  the  long  position  is  offset  by  the 
amount  received  on  the  short  position. 
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LO  11.4 

Risk  reduction  benefits  achieved  through  diversification  come  from  reducing  nonsystematic 
risk.  Therefore,  the  expected  return  on  a well-diversified  portfolio  is  determined  by 
systematic  risk  as  measured  by  beta. 

A single-factor  security  market  line  (SML)  is  analogous  to  the  capital  asset  pricing  model 
(CAPM).  In  the  single-factor  SML,  systematic  risk  is  measured  as  the  exposure  of  the  asset 
to  a well-diversified  market  index  portfolio.  The  index  portfolio  can  be  any  well-diversified 
portfolio  thought  to  be  highly  correlated  with  the  systematic  factor  that  affects  the  returns 
of  assets.  The  equation  for  the  single-factor  SML  for  any  well-diversified  portfolio  is: 

E(Rp)  = Rp  + (3p[E(RM)  - RF]  , where  Rp  is  the  risk-free  rate,  M is  an  observable  well- 
diversified  market  index,  and  (3p  is  the  beta  of  any  portfolio,  P,  relative  to  the  market  index. 


LO  11.5 

A multifactor  model  can  be  used  to  hedge  away  multiple  factor  risks.  To  do  so,  the  investor 
can  create  factor  portfolios,  which  are  well-diversified  portfolios  with  beta  equal  to  one  for  a 
single  risk  factor,  and  betas  equal  to  zero  on  the  remaining  risk  factors.  Factor  portfolios  can 
be  used  to  hedge  multiple  risk  factors  by  combining  the  original  portfolio  with  offsetting 
positions  in  the  factor  portfolios. 


LO  11.6 

The  arbitrage  pricing  theory  describes  expected  returns  as  a linear  function  of  exposures  to 
common  (i.e.,  macroeconomic)  risk  factors:  E(Rj)  = Rp  + (3i]RP1  + 0j2^2  + ---  + W. 
where  RP.  is  the  risk  premium  associated  with  risk  factory. 

The  CAPM  is  a special  case  of  the  APT  where  there  is  only  one  priced  risk  factor  (market 
risk). 

The  Fama-French  three-factor  model  describes  returns  as  a linear  function  of  the  market 
index  return,  firm  size,  and  book-to-market  factors.  The  firm  size  factor,  SMB,  equals  the 
difference  in  returns  between  portfolios  of  small  and  big  firms.  The  book-to-market  factor, 
HML,  equals  the  difference  in  returns  between  portfolios  of  high  and  low  book-to-market 
firms. 
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Concept  Checkers 


1.  Which  of  the  following  is  least  likely  to  be  one  of  the  inputs  to  a multifactor  model? 

A.  The  mean-variance  efficient  market  portfolio. 

B.  Factor  betas. 

C.  Deviations  of  factor  values  from  their  expected  values. 

D.  Firm-specific  returns. 

2.  Suppose  an  analyst  examines  expected  returns  for  the  BroadBand  Company  (BBC) 
based  on  a 2-factor  model.  Initially,  the  expected  return  for  BBC  equals  10%.  The 
analyst  identifies  GDP  and  10-year  interest  rates  as  the  two  factors  for  the  factor 
model.  Assume  the  following  data  is  used: 

GDP  growth  consensus  forecast  = 6% 

Interest  rate  consensus  forecast  = 3% 

GDP  factor  beta  for  BBC  = 1.50 

Interest  rate  factor  beta  for  BBC  = -1.00 

Suppose  GDP  ends  up  growing  5%  and  the  10-year  interest  rate  ends  up  equaling 
4%.  Also  assume  that  during  the  period,  the  BroadBand  Company  unexpectedly 
experiences  shortages  of  key  inputs,  causing  its  revenues  to  be  less  than  originally 
expected.  Consequently,  the  firm-specific  return  is  -2%  during  the  period.  Using 
the  2-factor  model  with  the  revised  data,  which  of  the  following  expected  returns  for 
BBC  is  correct? 

A.  1.5%. 

B.  3.5%. 

C.  5.5%. 

D.  6.5%. 

3.  Which  of  the  following  statements  is  least  likely  a requirement  for  an  arbitrage 
opportunity?  The  arbitrage  situation  leads  to  a: 

A.  risk-free  opportunity. 

B.  zero  net  investment  opportunity. 

C.  profitable  opportunity. 

D.  return  in  excess  of  the  risk-free  rate  opportunity. 

4.  Which  of  the  following  assumptions  is  not  made  when  forming  a single-factor 
security  market  line? 

A.  Security  returns  are  described  by  a factor  model. 

B.  A mean-variance  efficient  market  portfolio  exists. 

C.  Well-diversified  portfolios  can  be  formed. 

D.  No  arbitrage  opportunities  exist. 
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Suppose  Portfolio  P has  factor  betas  of  0.40  and  0.50  on  two  risk  factors  (risk 
factors  1 and  2,  respectively).  Assume  a portfolio  manager  wishes  to  hedge  away  all 
of  the  exposure  to  the  two  risk  factors,  yet  does  not  want  to  sell  the  portfolio.  Which 
of  the  following  strategies  is  expected  to  achieve  the  desired  result? 

A.  Short  sell  a hedge  portfolio  that  allocates  40%  to  the  first  factor  portfolio, 

50%  to  the  second  factor  portfolio,  and  10%  to  the  risk-free  asset. 

B.  Short  sell  a hedge  portfolio  that  allocates  90%  to  the  market  portfolio  and 
10%  to  the  risk-free  asset. 

C.  Buy  a hedge  portfolio  that  allocates  40%  to  the  first  factor  portfolio,  50%  to  the 
second  factor  portfolio,  and  10%  to  the  risk-free  asset. 

D.  Buy  a hedge  portfolio  that  allocates  90%  to  the  market  portfolio  and  10%  to 
the  risk-free  asset. 
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Concept  Checker  Answers 


1.  A The  mean-variance  efficient  market  portfolio  is  essential  to  the  capital  asset  pricing  model, 
hut  is  not  required  in  multifactor  models. 

2-  c rbbc  = E(RBBc)  + 1\bC,GDPFGDP  + 3bbC,IRRIR  + 1'bbc 

Rbbc  = 0.10  + 1.5(— 0.01)  - 1(0.01)  - 0.02  = 0.055  = 5.5% 

3.  D An  arbitrage  situation  exists  if  a risk-free,  zero  net  investment  can  be  created  that  produces  a 

positive  profit.  The  arbitrage  return  need  not  exceed  the  risk-free  rate. 

4.  B The  derivation  of  the  single-factor  security  market  line  does  not  rely  on  the  assumption  that 

a mean-variance  efficient  market  portfolio  exists.  This  is  in  contrast  with  the  capita]  asset 
pricing  model,  which  relies  on  the  existence  of  the  mean-variance  efficient  market  portfolio. 

5.  A A factor  portfolio  is  a well-diversified  portfolio  that  has  a factor  beta  equal  to  one  for  a single 

risk  factor,  and  factor  betas  equal  to  zero  on  the  remaining  factors.  By  shorting  the  hedge 
portfolio,  the  investor  will  offset  the  factor  risks  of  the  original  portfolio.  In  this  case,  the 
0.40  and  0.50  exposures  to  the  two  risk  factors  are  offset  by  the  short  position  in  the  hedge 
portfolio  that  also  has  0.40  and  0.50  exposures  to  the  two  risk  factors. 
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objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


Information  Risk  and  Data  Quality 
Management 


Topic  12 

Exam  Focus 

This  topic  is  a qualitative  examination  of  data  quality  issues.  Organizations  must  understand 
the  risks  involved  with  data  issues  and  be  able  to  identify  ways  to  protect  one  of  their  most 
valuable  resources,  their  data.  For  the  exam,  focus  on  the  important  features  of  acceptable 
data  as  well  as  details  surrounding  data  quality  scorecards. 


Poor  Data  Quality 


LO  12.1:  Assess  the  potential  negative  impact  poor  data  quality  may  have  on  a 
business. 


The  following  is  a list  of  negative  impacts  on  a business  from  poor  data  quality. 

Financial  impacts: 

• Businesses  may  experience  lower  revenues  (e.g.,  lost  sales),  higher  expenses 
(e.g.,  penalties,  re-work  costs),  and  lower  cash  flows  as  a result  of  inaccurate  or 
incomplete  data. 

Confidence-based  impacts: 

• Managers  may  make  incorrect  business  decisions  based  on  faulty  data. 

• Poor  forecasting  may  result  due  to  input  errors. 

• Inaccurate  internal  reporting  may  occur  with  unreliable  information. 

Satisfaction  impacts: 

• Customers  may  become  dissatisfied  when  the  business  processes  faulty  data  (e.g.,  billing 
errors). 

• Employees  may  become  dissatisfied  when  they  are  unable  to  properly  perform  their  job 
due  to  flawed  data. 

Productivity  impacts: 

• Additional  (corrective)  work  may  be  required,  thereby  reducing  production  output. 

• Delays  or  increases  in  processing  time. 

Risk  impacts : 

• Underestimating  credit  risks  due  to  inaccurate  documentation,  thereby  exposing  a lender 
to  potential  losses  (e.g.,  Basel  II  Accords  for  quantifying  credit  risk). 

• Underestimating  investment  risk,  thereby  exposing  an  investor  to  potential  losses. 
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Compliance  impacts : 

• A business  may  no  longer  be  in  compliance  with  regulations  (e.g.,  Sarbanes-Oxley)  if 
financial  reports  are  inaccurate. 

Data  Errors 


LO  12.2:  Identify  the  most  common  issues  which  result  in  data  errors. 


The  most  common  data  issues  that  increase  risk  for  an  organization  are  as  follows: 

• Data  entry  errors. 

• Missing  data. 

• Duplicate  records. 

• Inconsistent  data. 

• Nonstandard  formats. 

• Complex  data  transformations. 

• Failed  identity  management  processes. 

• Undocumented,  incorrect,  or  misleading  metadata  (description  of  content  and  context 
of  data  files). 

From  a financial  perspective,  such  data  errors  (accidental  or  not)  may  lead  to  inconsistent 
reporting,  incorrect  product  pricing,  and  failures  in  trade  settlement. 

Examples  of  risks  arising  out  of  data  errors  include: 

• Fraudulent  payroll  overpayments  to  fictitious  employees  or  those  who  are  no  longer 
employed  by  the  firm. 

• Underbilling  for  services  rendered. 

• Underestimating  insurance  risk  due  to  missing  and  inaccurate  values  (e.g.,  insured 

value). 

Acceptable  Data 


LO  12.3:  Identify  some  key  dimensions  of  data  quality. 


A fundamental  step  in  managing  risks  due  to  flawed  data  would  be  to  set  out  the  user 
expectations  for  data  quality  and  then  establish  criteria  to  monitor  compliance  with  such 
expectations.  The  important  (but  not  complete)  set  of  dimensions  which  characterize 
acceptable  data  are  as  follows: 

Accuracy 

The  concept  of  accuracy  can  be  described  as  the  degree  to  which  data  correctly  reflects  the 
real  world  object.  Measurement  of  accuracy  can  occur  by  manually  comparing  the  data  to 
an  authoritative  source  of  correct  information — for  example,  the  temperature  recorded  in  a 
thermometer  compared  to  the  real  temperature. 
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Completeness 

Completeness  refers  to  the  extent  to  which  the  expected  attributes  of  data  are  provided. 
There  may  be  mandatory  and  optional  aspects  of  completeness.  For  example,  it  may 
be  mandatory  to  have  a customers  primary  phone  number,  but  if  the  secondary  phone 
number  (optional)  is  not  available,  then  the  data  requirement  for  the  phone  number  is  still 
considered  complete. 

Note  that  although  data  may  be  complete,  it  may  not  necessarily  be  accurate.  For  example, 
customers  may  have  moved  and  their  mailing  addresses  may  not  have  been  updated  yet. 

Consistency 

Consistency  refers  to  reasonable  comparison  of  values  between  multiple  data  sets.  The 
concept  of  consistency  is  broad  and  could  require  that  data  values  from  each  data  set  do  not 
conflict  (e.g.,  a bank  account  is  closed  but  the  statement  still  shows  account  activity)  or  that 
they  meet  certain  pre-defined  constraints. 

Note  that  consistency  does  not  necessarily  imply  accuracy. 

There  are  three  types  of  consistency: 

1.  Record  level : consistency  between  one  set  of  data  values  and  another  set  within  the  same 
record. 

2.  Cross-record  level : consistency  between  one  set  of  data  values  and  another  set  in  different 
records. 

3.  Temporal  level : consistency  between  one  set  of  data  values  and  another  set  within  the 
same  record  at  different  points  in  time. 

Reasonableness 

Reasonableness  refers  to  conformity  with  consistency  expectations.  For  example,  the  income 
statement  value  for  interest  expense  .should  be  consistent  or  within  an  acceptable  range 
when  compared  to  the  corresponding  balance  sheet  value  for  long-term  debt. 

Currency 

Currency  of  data  refers  to  the  lifespan  of  data.  In  other  words,  is  the  data  still  considered 
relevant  and  useful,  given  that  the  passage  of  time  will  gradually  render  it  less  current  and 
less  correct?  Measurement  of  currency  would  consist  of  determining  the  frequency  in  which 
the  data  needs  to  be  updated,  and  determining  whether  the  existing  data  is  still  up-to-date. 

Uniqueness 

Uniqueness  of  data  is  tied  into  the  data  error  involving  duplicate  records.  Uniqueness 
suggests  that  there  can  only  be  one  data  item  within  the  data  set.  For  example,  within  a 
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client  list,  there  should  only  be  one  Mr.  Jack  Lee  with  a date  of  birth  of  January  1,  1970 
living  at  1 234  Anywhere  Street  in  New  York  City. 

Operational  Data  Governance 


LO  12.4:  Describe  the  operational  data  governance  process  and  differentiate 
between  data  quality  inspection  and  data  validation. 


Operational  data  governance  refers  to  the  collective  set  of  rules  and  processes  regarding  data 
that  allow  an  organization  to  have  sufficient  confidence  in  the  quality  of  its  data. 

Specifically,  a data  governance  program  should  exist  that  clarifies  the  roles  and 
responsibilities  in  managing  data  quality.  A data  quality  scorecard  could  be  used  to  monitor 
the  success  of  such  a program. 

In  short,  operational  data  governance  aims  to  detect  data  errors  early  on  and  then  set  into 
motion  the  steps  needed  to  sufficiently  deal  with  the  errors  on  a timely  basis.  As  a result, 
there  should  be  minimal  or  no  subsequent  impact  on  the  organization. 

Data  Quality  Inspection  vs.  Data  Validation 

Data  validation  is  a one-time  step  that  reviews  and  assesses  whether  data  conforms  to 
defined  business  specifications.  In  contrast,  data  quality  inspection  is  an  on-going  set  of 
steps  aimed  to: 

1 . reduce  the  number  of  errors  to  a tolerable  level, 

2.  spot  data  flaws  and  make  appropriate  adjustments  to  allow  data  processing  to  be 
completed,  and 

3.  solve  the  cause  of  the  errors  and  flaws  in  a timely  manner. 

The  goal  of  data  quality  inspection  is  to  catch  issues  early  on  before  they  have  a substantial 
negative  impact  on  business  operations. 

Data  Quality  Scorecard 


LO  12.5:  Summarize  the  process  of  creating  a data  quality  scorecard  and  compare 
three  different  viewpoints  for  reporting  data  via  a data  quality  scorecard. 


A base-level  metric  is  straightforward  in  that  it  is  measured  against  clear  data  quality 
criteria.  It  is  relatively  easy  to  quantify  whether  the  criteria  is  met  in  terms  of  arriving  at  a 
data  quality  score. 
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In  contrast,  a complex  metric  is  a combined  score  that  could  be  a weighted  average  of 
several  different  metrics  (customized  to  the  specific  user(s)).  Such  a combined  metric  allows 
for  a qualitative  reporting  of  the  impact  of  data  quality  on  the  organization.  A data  quality 
scorecard  could  report  the  metric  in  one  of  three  ways:  by  issue,  by  business  process,  or  by 
business  impact. 

Complex  Metric  Scorecard  Viewpoints 

Data  quality  issues  view: 

• Considers  the  impact  of  a specific  data  quality  problem  over  multiple  business  processes. 

• The  scorecard  shows  a combined  and  summarized  view  of  the  impacts  for  each  data 
problem.  By  going  into  more  detail,  one  can  obtain  further  information  on  the  sources 
of  data  problems.  This  allows  for  prioritization  in  terms  of  solving  individual  problems. 

Business  process  view: 

• For  each  business  process,  the  scorecard  has  complex  metrics  that  quantify  the  impact  of 
each  data  quality  problem. 

• It  allows  for  the  ability  to  determine  exactly  where  in  the  business  process  the  data 
problem  is  originating.  This  will  assist  in  solving  the  problem  efficiently. 

Business  impact  view: 

• The  scorecard  provides  a high-level  understanding  of  the  risks  embedded  in  data  quality 
problems  (i.e.,  a combined  and  summarized  view).  It  considers  various  data  quality 
problems  that  occur  in  various  business  processes. 

• By  going  into  more  detail,  one  can  identify  the  business  processes  where  the  problems 
occur.  An  even  more  detailed  examination  will  reveal  the  specific  problems  within  each 
business  process. 

Motivation 

Business  managers  may  wish  to  take  advantage  of  an  opportunity  to  assess  the  relationship 
between  the  impacts  of  flawed  data  versus  the  pre -defined  parameters  of  acceptable  data 
quality.  Such  an  assessment  could  occur  with  a data  quality  scorecard,  with  data  being 
measured  against  the  benchmark  (acceptable  data  quality).  The  scorecard,  therefore, 
serves  as  a strong  management  technique  if  it  can  summarize  important  organizational 
information  as  well  as  provide  warning  signs  to  management  when  corrective  actions  are 
required. 

Mechanics 

Regardless  of  the  preferred  view,  a data  quality  scorecard  is  comprised  of  a hierarchy  of 
base-level  and  complex  metrics  that  tie  into  different  levels  of  accountability  within  the 
organization.  With  regard  to  metrics,  the  same  measurement  might  be  used  in  different 
contexts,  which  allows  for  different  error  tolerances  and  weights.  Finally,  scorecards  can  be 
customized  to  present  varying  levels  of  detail  depending  on  the  intended  user(s). 
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Key  Concepts 


LO  12.1 

Businesses  can  be  negatively  impacted  by  poor  data  quality  in  the  following  ways:  financial, 
confidence-based,  satisfaction,  productivity,  risk,  and  compliance. 


LO  12.2 

Data  errors  (e.g.,  missing  data,  inconsistent  data,  nonstandard  formats)  whether  they  are 
accidental  or  not,  may  lead  to  inconsistent  reporting,  incorrect  product  pricing,  or  failures 
in  trade  settlement. 


LO  12.3 

Key  dimensions  that  characterize  acceptable  data  include:  accuracy,  completeness, 
consistency,  reasonableness,  currency,  and  uniqueness. 


LO  12.4 

Operational  data  governance  refers  to  the  collective  set  of  rules  and  processes  regarding  data 
that  allow  an  organization  to  have  sufficient  confidence  in  the  quality  of  its  data. 


LO  12.3 

Three  different  viewpoints  regarding  scorecards  include:  data  quality  issues  view,  business 
process  view,  and  business  impact  view. 

Data  quality  scorecards  serve  as  a strong  management  technique  if  they  are  able  to 
summarize  important  organizational  information  as  well  as  provide  warning  signs  to 
management  when  corrective  actions  are  required. 
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Concept  Checkers 


1 . Ryan  Vail  is  a corporate  manager  who  recently  made  a series  of  incorrect  business 
decisions  as  a result  of  faulty  data  obtained  internally.  Which  of  the  following 
negative  business  impacts  best  describes  his  incorrect  decisions? 

A.  Compliance  impact. 

B.  Confidence-based  impact. 

C.  Financial  impact. 

D.  Risk  impact. 

2.  Data  consistency  is  important  to  ensure  that  there  are  no  clear  conflicts  in  data 
values  between  data  sets.  Which  of  the  following  types  of  data  consistency  refers  to 
consistency  between  one  set  of  data  values  and  another  set  of  data  values  in  different 
records? 

A.  Record  level. 

B.  Temporal  level. 

C.  Cross-record  level. 

D.  Cross- temp  oral  level. 

3.  Which  of  the  following  data  issues  is  least  likely  to  increase  risk  for  an  organization? 

A.  Duplicate  records. 

B.  Data  normalization. 

C.  Nonstandard  formats. 

D.  Data  transformations. 

4.  Which  of  the  following  statements  regarding  data  quality  inspection  is  correct?  It 
attempts  to: 

A.  catch  errors  early  in  the  process. 

B.  reduce  the  number  of  errors  to  zero. 

C.  solve  the  cause  of  any  errors  immediately. 

D.  review  and  assess  whether  data  conforms  with  defined  business  specifications. 

5.  Which  of  the  following  viewpoints  regarding  data  quality  scorecards  is  best  described 
as  providing  a high-level  understanding  of  the  risks  embedded  in  data  quality 
problems? 

A.  Business  impact  view. 

B.  Business  process  view. 

C.  Data  quality  issues  view. 

D.  Data  process  issues  view. 
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Concept  Checker  Answers 


1.  B An  example  of  a confidence-based  (negative)  impact  would  be  a manager  who  makes 

incorrect  business  decisions  based  on  faulty  data. 

2.  C Record  level  consistency  is  consistency  between  one  set  of  data  values  and  another  set  within 

the  same  record.  Cross-record  level  consistency  is  consistency  between  one  set  of  data  values 
and  another  set  in  different  records. 

3.  B Data  normalization  is  a process  to  better  organize  data  in  order  to  minimize  redundancy 

and  dependency,  so  it  is  least  likely  to  increase  risk.  All  of  the  other  data  issues  are  likely  to 
increase  risk,  especially  complex  data  transformations. 

4.  A Data  quality  inspection  is  intended  to  catch  issues  early  on  before  they  have  a substantial 

negative  impact  on  business  operations.  The  idea  is  to  reduce  the  number  of  errors  to  a 
tolerable  level,  not  necessarily  to  zero.  In  addition,  it  aims  to  solve  the  cause  of  the  errors  in  a 
timely  manner,  not  necessarily  immediately. 

3.  A With  the  business  impact  view,  the  scorecard  provides  a high-level  understanding  of  the  risks 
embedded  in  data  quality  problems  (i.e.,  a combined  and  summarized  view).  It  considers 
various  data  quality  problems  that  occur  in  various  business  processes. 
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objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 


Principles  for  Effective  Risk  Data 
Aggregation  and  Risk  Reporting 


Topic  13 

Exam  Focus 

This  is  a highly  qualitative  topic  that  explores  the  Basel  Committee’s  principles  for  effective 
risk  data  aggregation  and  reporting.  Much  of  this  topic  is  practical,  in  terms  of  the  need 
for  the  data  to  be  accurate,  complete,  timely,  comprehensive,  and  adaptable.  Governance 
principles  are  important,  and  the  committee  notes  that  risk  data  aggregation  and  reporting 
is  expensive,  and,  as  a result,  senior  management  and  the  board  of  directors  should  be  fully 
invested  in  the  process  so  that  adequate  resources  are  devoted  to  the  effort.  Risk  reporting 
should  also  be  accurate,  comprehensive,  clear,  and  useful.  For  the  exam,  understand  how 
data  aggregation  principles  interact  and  know  that  the  committee  implores  banks  to  meet  the 
requirements  of  each  principle  while  still  meeting  the  other  principles.  In  other  words,  the 
bank  should  not  put  one  principle  ahead  of  another. 


Benefits  of  Rjsk  Data  Aggregation 


LO  13.1:  Explain  the  potential  benefits  of  having  effective  risk  data  aggregation 
and  reporting. 


According  to  the  Basel  Committee  on  Banking  Supervision,  risk  data  aggregation  means 
“defining,  gathering  and  processing  risk  data  according  to  the  banks  risk  reporting 
requirements  to  enable  the  bank  to  measure  its  performance  against  its  risk  tolerance/ 
appetite.”  The  aggregation  process  includes  breaking  down,  sorting,  and  merging  data  and 
datasets.  Risk  management  reports  should  reflect  risks  in  a reliable  way. 

Several  benefits  accrue  to  banks  that  have  effective  risk  data  aggregation  and  reporting 
systems  in  place.  These  benefits  include: 

• An  increased  ability  to  anticipate  problems.  Aggregated  data  allows  risk  managers  to 
understand  risks  holistically.  It  is  easier  to  see  problems  on  the  horizon  when  risks  are 
viewed  as  a whole  rather  than  in  isolation. 

• In  times  of  financial  stress,  effective  risk  data  aggregation  enhances  a bank’s  ability  to 
identify  routes  to  return  to  financial  health.  For  example,  a bank  may  be  better  able  to 
identify  a suitable  merger  partner  in  order  to  restore  the  bank’s  financial  viability. 

• Improved  resolvability  in  the  event  of  bank  stress  or  failure.  Regulatory  authorities 
should  have  access  to  aggregated  risk  data  to  resolve  issues  related  to  the  health  and 
viability  of  banks.  This  is  especially  important  for  global  systemically  important  banks 

(G-SIBs). 

• By  strengthening  a bank’s  risk  function,  the  bank  is  better  able  to  make  strategic 
decisions,  increase  efficiency,  reduce  the  chance  of  loss,  and  ultimately  increase 
profitability. 
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Governance 


LO  13.2:  Describe  key  governance  principles  related  to  risk  data  aggregation  and 
risk  reporting  practices. 


During  the  global  financial  crisis  that  began  in  2007,  many  banks  were  unable  to  quickly 
and  accurately  identify  concentrations  of  risk  across  business  lines  and  at  the  bank  group 
level  due,  in  part,  to  an  inability  to  aggregate  risk  exposures  and  report  bank-wide  risks 
effectively.  As  part  of  the  Basel  Committee’s  push  for  greater  corporate  governance,  the 
committee  issued  supplemental  Pillar  2 guidance  regarding  capital  models  and  other  key 
risk  management  models  (e.g.,  value  at  risk)  to  improve  banks’  capabilities  regarding  the 
recognition  and  management  of  bank-wide  risks. 

Principle  1 — Governance 

According  to  the  committee,  “a  bank’s  risk  data  aggregation  capabilities  and  risk  reporting 
practices  should  be  subject  to  strong  governance  arrangements  consistent  with  the  other 
principles  and  guidance  established  by  the  Basel  Committee.” 

The  governance  principle  suggests  that  risk  data  aggregation  should  be  part  of  the  bank’s 
overall  risk  management  framework.  To  ensure  that  adequate  resources  are  devoted  to 
data  aggregation  and  reporting,  senior  management  should  approve  the  framework  before 
implementation. 

Data  aggregation  and  risk  reporting  practices  should  be: 

• Fully  documented. 

• Independently  reviewed  and  validated  by  individuals  with  expertise  in  information 
technology  (IT)  and  data  and  risk  reporting  functions. 

• Considered  when  the  firm  undergoes  new  initiatives,  including  new  product 
development,  acquisitions,  and/or  divestitures.  As  part  of  an  acquisition,  the  bank  should 
assess  the  risk  data  aggregation  and  reporting  capabilities  of  the  target  firm  and  explicitly 
evaluate  those  capabilities  when  deciding  whether  to  make  the  acquisition.  In  addition, 

a time  frame  should  be  established  to  integrate  the  risk  data  aggregation  and  reporting 
processes  of  the  two  firms. 

• Unaffected  by  the  bank’s  structure.  Specifically,  decisions  regarding  data  aggregation  and 
reporting  should  be  independent  of  the  banks  physical  location  or  geographical  presence 
and/or  legal  organization. 

• A priority  of  senior  management,  who  should  support  risk  data  aggregation  and 
reporting  processes  with  financial  and  human  resources.  Senior  management  should 
include  risk  data  aggregation  and  reporting  in  strategic  IT  planning  and  ensure  that  the 
implementation  of  these  processes  is  not  impeded. 

• Supported  by  the  board  of  directors,  which  should  remain  aware  of  the  bank’s 
implementation  of  and  compliance  with  the  key  governance  principles  set  out  by  the 
Basel  Committee. 
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Data  Architecture  and  IT  Infrastructure 


LO  13.3:  Identify  the  data  architecture  and  IT  infrastructure  features  that  can 
contribute  to  effective  risk  data  aggregation  and  risk  reporting  practices. 


IT  systems  are  expensive,  and  risk  aggregation  and  reporting  systems  require  significant 
commitments  of  financial  and  human  resources.  Benefits  from  these  investments  are 
generally  realized  over  the  long-term,  not  the  short-term.  As  the  memories  of  the  recent 
financial  crisis  fade,  banks  may  not  give  priority  to  the  needed  IT  investment.  The  Basel 
Committee  believes  that  the  long-term  benefits  of  improving  risk  aggregation  and  reporting 
processes  will  outweigh  the  banks  investments. 


Principle  2 — Data  Architecture  and  Infrastructure 

According  to  the  committee,  “a  bank  should  design,  build  and  maintain  data  architecture 
and  IT  infrastructure  which  fully  supports  its  risk  data  aggregation  capabilities  and  risk 
reporting  practices  not  only  in  normal  times  but  also  during  times  of  stress  or  crisis,  while 
still  meeting  the  other  Principles.” 

Principle  2,  as  referenced  in  Principle  1,  implores  the  bank  to  devote  financial  and  human 
resources  to  risk  data  aggregation  and  reporting,  both  when  the  bank  is  financially  sound 
and  when  the  bank  is  struggling  due  to  financial  stresses.  Principle  2 requires  that: 

• Risk  data  aggregation  and  reporting  practices  should  be  a part  of  the  bank’s  planning 
processes  and  subject  to  business  impact  analysis. 

• Banks  establish  integrated  data  classifications  and  architecture  across  the  banking  group. 
Multiple  data  models  may  be  used  as  long  as  there  are  robust  automated  reconciliation 
measures  in  place.  Data  architecture  should  include  information  on  data  characteristics 
(metadata)  and  naming  conventions  for  legal  entities,  counterparties,  customers,  and 
account  data. 

• Accountability,  roles,  responsibilities,  and  ownership  should  be  defined  relative  to  the 
data.  Adequate  controls  should  be  in  place  throughout  the  lifecycle  of  the  data  for  all 
aspects  of  the  technology  infrastructure.  Risk  managers,  business  managers,  and/or  IT 
functions  are  responsible  for  data,  ensuring  that  it  is  entered  correctly,  is  relevant  and 
current,  is  aligned  with  data  taxonomies,  and  is  consistent  with  bank  policies. 

Risk  Data  Aggregation  Capabilities 


LO  13.4:  Describe  characteristics  of  a strong  risk  data  aggregation  capability  and 
demonstrate  how  these  characteristics  interact  with  one  another. 


Principle  3 — Accuracy  and  Integrity 

According  to  the  committee,  “a  bank  should  be  able  to  generate  accurate  and  reliable  risk 
data  to  meet  normal  and  stress/crisis  reporting  accuracy  requirements.  Data  should  be 
aggregated  on  a largely  automated  basis  so  as  to  minimize  the  probability  of  errors.” 
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Principle  3 requires  that: 

• Data  aggregation  and  reporting  should  be  accurate  and  reliable. 

• Controls  applied  to  risk  data  should  be  as  robust  as  those  surrounding  accounting  data. 

• To  ensure  the  quality  of  the  data,  effective  controls  should  be  in  place  when  the  bank 
relies  on  manual  processes  and  desktop  applications  such  as  spreadsheets  and  databases. 

• Data  should  be  reconciled  with  other  bank  data,  including  accounting  data,  to  ensure  its 
accuracy. 

• A bank  should  endeavor  to  have  a single  authoritative  source  for  risk  data  for  each 
specific  type  of  risk. 

• Risk  personnel  should  have  access  to  risk  data  to  effectively  aggregate,  validate,  reconcile, 
and  report  the  data  in  risk  reports. 

• Data  should  be  defined  consistently  across  the  bank.  The  bank  may  maintain  a 
dictionary  of  risk  data  concepts  and  terms. 

• While  data  should  be  aggregated  on  a largely  automated  basis  to  reduce  the  risk  of  errors, 
human  intervention  is  appropriate  when  professional  judgments  are  required.  There 
should  be  balance  between  manual  and  automated  risk  management  systems. 

• Bank  supervisors  expect  banks  to  document  manual  and  automated  risk  data  aggregation 
systems  and  explain  when  there  are  manual  workarounds,  why  the  workarounds 

are  critical  to  data  accuracy,  and  propose  actions  to  minimize  the  impact  of  manual 
workarounds. 

• Banks  monitor  the  accuracy  of  risk  data  and  establish  plans  to  correct  poor  data  quality. 
Principle  4 — Completeness 

According  to  the  committee,  “a  bank  should  be  able  to  capture  and  aggregate  all  material 
risk  data  across  the  banking  group.  Data  should  be  available  by  business  line,  legal  entity, 
asset  type,  industry,  region  and  other  groupings,  as  relevant  for  the  risk  in  question,  that 
permit  identifying  and  reporting  risk  exposures,  concentrations  and  emerging  risks.” 

Principle  4 requires  that: 

• Both  on-  and  off-balance  sheet  risks  should  be  aggregated. 

• Risk  measures  and  aggregation  methods  should  be  clear  and  specific  enough  that  senior 
managers  and  the  board  of  directors  can  properly  assess  risk  exposures.  However,  not  all 
risks  need  to  be  expressed  in  the  same  metric. 

• Bank  risk  data  should  be  complete.  If  risk  data  is  not  complete,  the  bank  should  identify 
and  explain  areas  of  incompleteness  to  bank  supervisors. 

Principle  3 — Timeliness 

According  to  the  committee,  “a  bank  should  be  able  to  generate  aggregate  and  up-to-date 
risk  data  in  a timely  manner  while  also  meeting  the  principles  relating  to  accuracy  and 
integrity,  completeness  and  adaptability.  The  precise  timing  will  depend  upon  the  nature 
and  potential  volatility  of  the  risk  being  measured  as  well  as  its  criticality  to  the  overall  risk 
profile  of  the  bank.  The  precise  timing  will  also  depend  on  the  bank  specific  frequency 
requirements  for  risk  management  reporting,  under  both  normal  and  stress/crisis  situations, 
set  based  on  the  characteristics  and  overall  risk  profile  of  the  bank.” 
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Principle  5 requires  that: 

• Risk  data  aggregation  should  be  timely  and  should  meet  all  requirements  for  risk 
management  reporting.  Bank  supervisors  will  review  the  timeliness  and  specific 
frequency  requirements  of  bank  risk  data  in  normal  and  stress/crisis  periods. 

• Systems  should  be  in  place  to  produce  aggregated  risk  data  quickly  in  stress/crisis 
situations  for  all  critical  risks.  Critical  risks  include,  but  are  not  limited  to: 

♦ Aggregated  credit  exposures  to  large  corporate  borrowers. 

♦ Counterparty  credit  risk  exposures,  including  derivatives. 

♦ Trading  exposures,  positions,  and  operating  limits. 

♦ Market  concentrations  by  region  and  sector. 

♦ Liquidity  risk  indicators. 

♦ Time-critical  operational  risk  indicators. 

Principle  6 — Adaptability 

According  to  the  committee,  “a  bank  should  be  able  to  generate  aggregate  risk  data  to  meet 
a broad  range  of  on-demand,  ad  hoc  risk  management  reporting  requests,  including  requests 
during  stress/crisis  situations,  requests  due  to  changing  internal  needs  and  requests  to  meet 
supervisory  queries.” 

Principle  6 requires  that: 

• Data  aggregation  capabilities  should  be  adaptable  and  flexible.  Adaptable  data  makes 
it  easier  for  managers  and  the  board  of  directors  to  conduct  stress  tests  and  scenario 
analysis.  Data  should  be  available  for  ad  hoc  data  requests  to  assess  emerging  risks. 
Adaptability  includes: 

♦ Aggregation  processes  should  be  flexible  and  should  allow  bank  managers  to  assess 
risks  quickly  for  decision-making  purposes. 

♦ Data  should  be  customizable  (e.g.,  anomalies,  dashboards,  and  key  takeaways)  and 
should  allow  the  user  to  investigate  specific  risks  in  greater  detail. 

♦ It  should  be  possible  to  include  new  aspects  of  the  business  or  outside  factors  that 
influence  overall  bank  risk  in  the  risk  data  aggregation  process. 

♦ Regulatory  changes  should  be  incorporated  in  risk  data  aggregation. 

• A bank  should  be  able  to  pull  out  specifics  from  aggregated  risk  data.  For  example, 
a bank  should  be  able  to  aggregate  risks  of  a certain  country  or  region.  Credit  risk 
exposures  (e.g.,  corporate,  bank,  sovereign  and  retail  exposures)  for  a specific  country 
should  be  readily  accessible.  Data  regarding  risks  across  geographic  areas  or  business  lines 
should  be  available  as  needed. 

The  principles  of  accuracy  and  integrity,  completeness,  timeliness,  and  adaptability  interact; 
a bank  may  choose  to  put  one  principle  ahead  of  another,  or  the  data  is  aggregated  with 
one  principle  in  mind  while  ignoring  another.  For  example,  in  the  interest  of  speed  and 
timeliness,  a bank  could  take  shortcuts  with  respect  to  completeness.  Also,  the  accuracy 
and  integrity  of  the  data  may  suffer  if  a bank  is  in  a hurry  to  comply  with  the  timeliness 
standard.  In  addition,  the  data  could  be  compiled  in  such  a way  that  supports  accuracy  and 
integrity,  but  makes  the  data  inflexible  and  not  easily  adaptable  for  specific  needs.  The  bank 
should  consider  all  the  standards  when  creating  and  maintaining  a risk  data  aggregation 
framework. 
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Effective  Risk  Reporting  Practices 


LO  13.5:  Describe  characteristics  of  effective  risk  reporting  practices. 


Effective  risk  reporting  practices  include: 

• Clear,  complete,  timely,  and  accurate  data. 

• Risk  data  is  reported  to  the  right  people  at  the  right  time.  In  other  words,  the  key 
decision-makers  should  have  access  to  the  data  in  a timely  fashion  to  allow  for  good 
decision-making. 

Principle  7 — Accuracy 

According  to  the  committee,  “risk  management  reports  should  accurately  and  precisely 
convey  aggregated  risk  data  and  reflect  risk  in  an  exact  manner.  Reports  should  be 
reconciled  and  validated.” 

Principle  7 requires  that: 

• Risk  reports  should  be  accurate  and  precise.  Senior  managers  and  board  members  should 
be  able  to  use  the  reports  to  make  critical  decisions  about  bank  risks. 

• To  ensure  the  accuracy  of  risk  reports  the  bank  should: 

♦ Define  the  processes  used  to  create  risk  reports. 

♦ Create  reasonableness  checks  of  the  data. 

♦ Include  descriptions  of  mathematical  and  logical  relationships  in  the  data  that 
should  be  verified. 

♦ Create  error  reports  that  identify,  report,  and  explain  weaknesses  or  errors  in  the 
data. 

• The  bank  should  ensure  the  reliability,  accuracy,  and  timeliness  of  risk  approximations 
(e.g.,  scenario  analysis,  sensitivity  analysis,  stress  testing,  and  other  risk  modeling 
approaches). 

• The  board  of  directors  and  senior  managers  should  establish  precision  and  accuracy 
requirements  for  regular  and  stress/crisis  risk  reports.  The  reports  should  include 
information  on  positions  and  exposures  in  the  market.  The  criticality  of  decisions  made 
using  the  data  should  be  clearly  stated. 

• Bank  supervisors  expect  banks  to  impose  accuracy  requirements  on  risk  data  (both 
regular  and  stress/crisis)  commensurate  with  and  analogous  to  accounting  materiality. 

For  example,  if  an  omission  influences  risk  decision-making,  then  it  is  deemed  material. 

Principle  8 — Comprehensiveness 

According  to  the  committee  “risk  management  reports  should  cover  all  material  risk  areas 
within  the  organization.  The  depth  and  scope  of  these  reports  should  be  consistent  with  the 
size  and  complexity  of  the  hanks  operations  and  risk  profile,  as  well  as  the  requirements  of 
the  recipients.” 
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Principle  8 requires  that: 

• Reports  should  contain  position  and  risk  exposure  information  for  all  relevant  risks, 
such  as  credit  risk,  liquidity  risk,  market  risk,  and  operational  risk.  The  report  should 
also  include  detailed  information  for  specific  risks.  For  example,  credit  risk  reports 
should  include  information  on  the  country,  region,  sector,  industry,  and/or  single  name 
exposures.  Risk  related  measures  such  as  the  banks  regulatory  capital  should  also  be 
included  in  risk  reports. 

• Risk  reports  should  be  forward-looking  and  should  include  forecasts  and  stress  tests. 

The  banks  risk  appetite/tolerance  should  be  discussed  in  the  context  of  emerging  risks. 
Recommendations  for  reducing  risk  should  be  included  where  appropriate.  Senior 
managers  and  the  board  of  the  directors  should  gain  a sense  of  the  banks  future  capital 
and  risk  profiles  from  reports. 

• Bank  supervisors  should  be  satisfied  that  the  banks  risk  reporting  is  sufficient  in  terms 
of  coverage,  analysis,  and  comparability  across  institutions.  A risk  report  should  include, 
but  not  be  limited  to,  information  regarding: 

♦ Credit  risk. 

♦ Market  risk. 

♦ Liquidity  risk. 

♦ Operational  risk. 

♦ Results  of  stress  tests. 

♦ Capital  adequacy. 

♦ Regulatory  capital. 

♦ Liquidity  projections. 

♦ Capital  projections. 

♦ Risk  concentrations. 

♦ Funding  plans. 

Principle  9 — Clarity  and  Usefulness 

According  to  the  committee  “risk  management  reports  should  communicate  information 
in  a clear  and  concise  manner.  Reports  should  be  easy  to  understand  yet  comprehensive 
enough  to  facilitate  informed  decision-making.  Reports  should  include  meaningful 
information  tailored  to  the  needs  of  the  recipients.” 

Principle  9 requires  that: 

• Reports  be  tailored  to  the  end  user  (e.g.,  the  board,  senior  managers,  and  risk  committee 
members)  and  should  assist  them  with  sound  risk  management  and  decision-making. 

• Reports  will  include: 

♦ Risk  data. 

♦ Risk  analysis. 

♦ Interpretation  of  risks. 

♦ Qualitative  explanations  of  risks. 

Different  members  of  the  organization  have  different  needs  in  terms  of  reporting.  For 
example,  information  relevant  to  the  risk  committee  may  not  be  specifically  relevant  to 
the  board  of  directors.  Aggregation  increases  as  the  report  moves  up  the  organizational 
hierarchy  (i.e.,  to  senior  managers  and  to  the  board).  There  is  a greater  need  for 
qualitative  interpretation  and  explanation  as  aggregation  increases. 
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• The  board  of  directors  should  ensure  the  bank  is  operating  within  its  risk  tolerance/ 
appetite,  and  should  therefore  make  sure  that  it  is  asking  for  and  receiving  relevant  risk 
information  to  make  the  determination.  The  board  should  tell  senior  management  if  the 
amount/type  of  data  it  is  receiving  is  insufficient  or  redundant.  The  mix  of  quantitative 
data  versus  qualitative  data  is  important.  Senior  management  should  also  ensure  that  it  is 
getting  the  right  mix  of  information  to  foster  good  risk  decisions. 

• Risk  data  should  be  classified,  and  the  hank  should  develop  an  inventory  of  terms  used 
in  risk  reports. 

• Bank  supervisors  will  confirm  periodically  that  the  risk  data  is  clear,  relevant,  and  useful 
for  decision-making. 

Principle  10 — Frequency 

According  to  the  committee,  “the  board  and  senior  management  (or  other  recipients 
as  appropriate)  should  set  the  frequency  of  risk  management  report  production  and 
distribution.  Frequency  requirements  should  reflect  the  needs  of  the  recipients,  the  nature 
of  the  risks  reported,  and  the  speed  at  which  the  risks  can  change,  as  well  as  the  importance 
of  reports  in  contributing  to  sound  risk  management  and  effective  and  efficient  decision- 
making across  the  bank.  The  frequency  of  reports  should  be  increased  during  times  of 
stress/crisis.” 

Principle  10  requires  that: 

• The  frequency  of  reports  will  vary  depending  on  the  recipient  (e.g.,  the  board,  senior 
managers,  and  risk  committee  members),  the  type  of  risk,  and  the  purpose  of  the  report. 
The  bank  should  periodically  test  whether  reports  can  be  accurately  produced  in  the 
established  time  frame  both  in  normal  and  stress/crisis  periods. 

• In  stress/crisis  periods,  liquidity,  credit,  and  market  risk  reports  may  be  required 
immediately  in  order  to  react  to  the  mounting  risks. 

Principle  11 — Distribution 

According  to  the  committee,  “risk  management  reports  should  be  distributed  to  the  relevant 
parties  while  ensuring  confidentiality  is  maintained.” 

Principle  1 1 requires  that: 

• Reports  should  be  disseminated  in  a timely  fashion  while  maintaining  confidentiality 
where  required.  Supervisors  expect  banks  to  confirm  that  recipients  receive  reports  in  a 
timely  manner. 

Professor's  Note:  There  are  a total  of  14  principles  for  effective  risk  data 

©aggregation  and  risk  reporting  set  out  by  the  Basel  Committee  on  Banking 
Supervision.  Principles  12—14  describe  the  role  of  bank  supervisors  in 
reviewing  and  evaluating  a banks  risk  aggregation  and  reporting  practices  and 
are  not  discussed  here , because  the  LOs  for  this  topic  focus  on  Principles  1—11. 
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Key  Concepts 


LO  13.1 

Benefits  that  accrue  from  effective  risk  data  aggregation  and  reporting  include:  (1)  an 
increased  ability  of  managers  and  the  board  to  anticipate  problems,  (2)  enhanced  ability 
to  identify  alternative  routes  to  restore  financial  health  in  times  of  financial  stress, 

(3)  improved  resolvability  in  the  event  of  bank  stress  or  failure,  and  (4)  an  enhanced  ability 
to  make  strategic  decisions,  increasing  the  banks  efficiency,  reducing  the  chance  of  loss  and 
ultimately  increasing  bank  profitability. 


LO  13.2 

The  governance  principle  (Principle  1)  suggests  that  risk  data  aggregation  should  be  part  of 
the  banks  overall  risk  management  framework.  The  board  and  senior  management  should 
assure  that  adequate  resources  are  devoted  to  risk  data  aggregation  and  reporting. 


LO  13.3 

The  data  architecture  and  IT  infrastructure  principle  (Principle  2)  states  that  a bank  should 
design,  build,  and  maintain  data  architecture  and  IT  infrastructure  which  fully  supports  its 
risk  data  aggregation  capabilities  and  risk  reporting  practices  not  only  in  normal  times  but 
also  during  times  of  stress  or  crisis,  while  still  meeting  the  other  principles.  It  stresses  that 
banks  should  devote  considerable  financial  and  human  resources  to  risk  data  aggregation 
and  reporting. 


LO  13.4 

Principles  3-6  specify  standards  and  requirements  for  effective  risk  data  aggregation.  Banks 
should  ensure  that  the  data  is  accurate  and  has  integrity  (Principle  3),  is  complete  (Principle 
4),  is  timely  (Principle  5),  and  is  adaptable  to  the  end  user  (Principle  6).  In  addition,  the 
bank  should  not  have  high  standards  for  one  principle  at  the  expense  of  another.  Aggregated 
risk  data  should  exhibit  all  of  the  features  together,  not  in  isolation. 


LO  13.5 

Principles  7-11  specify  standards  and  requirements  for  effective  risk  reporting  practices. 

Risk  reports  should  be  accurate  (Principle  7),  comprehensive  (Principle  8),  and  clear  and 
useful  (Principle  9).  Principle  10  states  that  reports  should  be  “appropriately  frequent”  (i.e., 
frequency  depends  on  the  role  of  the  recipient — board  members  need  reports  less  frequently 
than  risk  committee  members).  Reports  should  be  distributed  to  relevant  parties  in  a timely 
fashion  while  maintaining  confidentially  (Principle  11). 
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Concept  Checkers 


1 . Jeffrey  Gibson,  a bank  supervisor  with  a national  regulatory  agency,  has  requested 
as  part  of  a hank  examination,  that  Star  Bank,  a global  systemically  important 
bank  (G-SIB),  improve  its  aggregation  and  reporting  of  risk  data.  Star  Bank  has 
experienced  significant  losses  resulting  from  multiple  causes,  ranging  from  poor 
lending  decisions  to  bad  decisions  regarding  the  use  of  derivatives.  The  bank  is  now 
undercapitalized  because  of  losses.  Gibson  refers  Star  Bank’s  risk  managers  to  the 
Basel  Committees  recommendations  for  effective  risk  data  aggregation.  He  informs 
risk  committee  members  and  senior  management  that  one  of  the  potential  direct 
benefits  of  effective  risk  data  aggregation,  particularly  in  light  of  Star  Bank’s  current 
troubles,  is: 

A.  increased  bank  efficiency. 

B.  more  effective  IT  infrastructure. 

C.  improved  resolvability  of  bank  problems. 

D.  a clearer  definition  of  the  bank’s  risk  appetite. 

2.  Donna  Grinstead  is  the  risk  management  officer  at  Republic  Bank.  She  is 
establishing  governance  principles  for  effective  risk  data  aggregation.  The  bank  has 
historically  been  lenient  with  respect  to  risk  management  processes,  and  Grinstead 
has  been  hired  to  remedy  the  situation.  Which  of  the  following  statements  regarding 
governance  principles  is  false? 

A.  The  overall  risk  management  framework  of  the  bank  should  include  risk  data 
aggregation. 

B.  Human  and  financial  resources  should  be  devoted  to  risk  data  aggregation,  and 
thus  senior  management  should  approve  the  framework. 

C.  A bank  should  have  multiple  sources  for  risk  data  for  each  type  of  risk  to 
improve  reliability. 

D.  Risk  data  aggregation  should  be  considered  when  the  firm  undergoes  new 
initiatives,  including  acquisitions  and  divestitures. 

3.  A bank  should  include  information  on  data  characteristics  (metadata)  and  naming 
conventions  for  legal  entities,  counterparties,  customers,  and  account  data  in 
aggregated  risk  data.  This  is  suggested  by  the  Basel  Committee  on  Banking 
Supervision  in  the  principle  related  to: 

A.  accuracy. 

B.  completeness. 

C.  clarity  and  usefulness. 

D.  data  architecture  and  infrastructure. 
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4.  Emily  Lister,  a risk  management  specialist  at  American  Bank  and  Trust,  has  been 
asked,  as  part  of  Principle  3 on  the  accuracy  and  integrity  of  aggregated  risk  data, 
to  provide  a report  to  bank  supervisors  on  why  a bank  employee  decided  to  forgo 
the  automated  processes  put  in  place  by  the  risk  management  team  and  write  data 
entries  by  hand.  Lister  believes  it  was  necessary  after  discussing  the  action  with  the 
employee.  In  her  report,  she  details  why  it  was  necessary  for  the  employee  to  forgo 
automated  processes  and  why  she  believes  the  integrity  of  the  data  is  still  intact.  In 
the  report,  she  is  describing  a(n): 

A.  breach  of  protocol. 

B.  manual  workaround. 

C.  reliability  exception  to  Principle  3. 

D.  unexcused  exception  to  risk  data  aggregation  principles. 

5.  Senior  management  and  the  board  of  directors  should  receive  accurate  and  timely 
aggregated  risk  data  reports  for  all  of  the  following  reasons  except: 

A.  bank  supervisors  request  risk  reports  from  board  members,  who  should  be 
prepared  to  provide  this  information  during  bank  examinations. 

B.  senior  management  and  board  members  use  risk  reports  to  make  decisions 
regarding  bank  risks. 

C.  senior  management  and  board  members  should  react  in  times  of  financial  stress 
and/or  crisis  and  need  reliable  risk  reports  to  make  good  decisions. 

D.  the  board  should  ensure  that  the  bank  is  operating  within  its  risk  tolerance/ 
appetite  and  should  therefore  make  sure  that  it  receives  relevant  risk 
information. 
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Concept  Checker  Answers 


1 . C There  are  several  benefits  that  accrue  to  banks  that  have  effective  risk  data  aggregation  and 

reporting  systems  in  place.  These  benefits  include  an  increased  ability  to  anticipate  problems. 
Also,  in  times  of  severe  financial  stress,  effective  risk  data  aggregation  enhances  a banks 
ability  to  identify  alternative  routes  to  restore  financial  health.  Regulatory  authorities  should 
have  access  to  aggregated  risk  data  to  resolve  issues  related  to  bank  health  and  viability.  This 
aids  regulators  in  resolving  problems  in  the  event  of  financial  stress.  By  strengthening  a banks 
risk  function,  the  bank  is  better  able  to  make  strategic  decisions,  increase  efficiency,  reduce 
the  probability  of  loss  and  ultimately  increase  profitability.  In  this  case,  the  bank  appears  to 
be  in  financial  stress,  so  the  most  relevant  benefit  is  improved  resolvability. 

2.  C Governance  principles  for  risk  data  aggregation  relate  to  overall  bank  processes  and  the  roles 

of  senior  management  and  the  board  in  supporting  risk  data  aggregation  and  reporting.  Data 
sources  relate  to  the  accuracy  and  integrity  of  the  data,  not  governance.  In  addition,  the  bank 
should  strive  to  have  a single  source  for  risk  data,  not  multiple  sources. 

3.  D Principle  2,  data  architecture  and  infrastructure,  requires  that  risk  data  aggregation  and 

reporting  practices  should  be  a part  of  the  banks  planning  processes  and  subject  to  business 
impact  analysis.  Banks  should  establish  integrated  data  classifications  and  architecture  across 
the  banking  group.  Multiple  data  models  may  be  used  as  long  as  there  are  robust  automated 
reconciliation  measures  in  place.  In  addition,  data  architecture  should  include  information 
on  data  characteristics  (metadata)  and  naming  conventions  for  legal  entities,  counterparties, 
customers,  and  account  data. 

4.  B As  part  of  Principle  3 on  the  accuracy  and  integrity  of  aggregated  risk  data,  bank  supervisors 

expect  banks  to  document  manual  and  automated  risk  data  aggregation  systems  and  explain 
when  there  are  manual  workarounds,  why  the  workarounds  are  critical  to  data  accuracy,  and 
propose  actions  to  minimize  the  impact  of  a manual  workaround. 

5.  A It  is  important  for  the  board  and  senior  management  to  have  accurate  and  timely  risk  reports 

to  oversee  the  bank’s  risk-taking  activities.  The  bank’s  risk  tolerance/appetite  is  monitored 
by  the  board.  The  board  and  senior  managers  should  be  prepared  to  make  decisions  in  times 
of  financial  stress  and  crisis.  The  board  docs  not  provide  reports  to  regulators.  Information 
requests  from  supervisors  would  be  made  at  the  bank  level,  not  the  board  level. 


Page  170 


©2015  Kaplan,  Inc. 


The  following  is  a review  of  the  Foundations  of  Risk  Management  principles  designed  to  address  the  learning 
objectives  set  forth  by  GARP®.  This  topic  is  also  covered  in: 

GARP  Code  of  Conduct 


Topic  14 

Exam  Focus 

This  topic  addresses  the  GARP  Code  of  Conduct  which  sets  forth  principles  related  to 
ethical  behavior  within  the  risk  management  profession.  FRM  candidates  are  expected  to 
know  all  Member  responsibilities  as  well  as  sanctions  that  could  result  if  violations  of  the 
Code  occur.  The  material  in  this  topic  is  relatively  easy  to  understand;  however,  for  the  exam, 
you  should  expect  complex  questions  related  to  these  ethical  standards  that  test  whether  or 
not  a violation  has  occurred. 


The  GARP  Code  of  Conduct  contains  a set  of  key  principles  designed  to  support  financial 
risk  management  practices.  The  Code  was  developed  for  the  Financial  Risk  Manager  (FRM) 
program  as  well  as  other  certification  programs  administered  by  the  Global  Association  of 
Risk  Professionals  (GARP).  All  GARP  Members  (including  FRM  candidates)  are  expected 
to  abide  by  the  principles  outlined  in  the  Code  and  are  subject  to  consequences,  such  as 
suspensions,  for  violating  any  parts  of  the  Code. 

A GARP  Member  should  understand  that  high  ethical  behavior  goes  beyond  the  principles 
addressed  in  this  topic.  When  encountering  a situation  not  specifically  outlined  in  the 
Code,  Members  are  always  expected  to  act  in  an  ethical  fashion.  Acting  with  prudence  in  all 
situations  related  to  the  profession  will  uphold  the  integrity  of  the  risk  management  field  as 
well  as  risk  management  practitioners. 


The  Code  of  Conduct1 

The  Code  of  Conduct  stresses  ethical  behavior  in  two  areas:  (1)  Principles  and 
(2)  Professional  Standards.  The  Principles  section  addresses:  (1)  professional  integrity  and 
ethical  conduct,  (2)  conflicts  of  interest,  and  (3)  confidentiality.  The  Professional  Standards 
section  addresses:  (1)  fundamental  responsibilities  and  (2)  adherence  to  generally  accepted 
practices  in  risk  management.  The  responsibilities  listed  in  each  section  are  examined  in  the 
following  LO. 


1 . Copyright  2010,  Global  Association  of  Risk  Professionals.  Reproduced  and  republished  from 
“Code  of  Conduct”  with  permission  from  GARP  All  rights  reserved.  Retrieved  January  2,  2015, 
from  http://www.garp.  org/media/59589/code%20of%20conduct0610.pdf. 
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LO  14.1:  Describe  the  responsibility  of  each  GARP  member  with  respect  to 
professional  integrity,  ethical  conduct,  conflicts  of  interest,  confidentiality  of 
information  and  adherence  to  generally  accepted  practices  in  risk  management. 


1.  Professional  Integrity  and  Ethical  Conduct 

GARP  Members: 

1.1.  shall  act  professionally  ethically  and  with  integrity  in  all  dealings  with  employers, 
existing  or  potential  clients,  the  public,  and  other  practitioners  in  the  financial  services 
industry. 

1.2.  shall  exercise  reasonable  judgment  in  the  provision  of  risk  services  while  maintaining 
independence  of  thought  and  direction.  GARP  Members  must  not  offer,  solicit,  or 
accept  any  gift,  benefit,  compensation,  or  consideration  that  could  be  reasonably 
expected  to  compromise  their  own  or  another’s  independence  and  objectivity. 

1 .3.  must  take  reasonable  precautions  to  ensure  that  the  Member’s  services  are  not  used  for 
improper,  fraudulent  or  illegal  purposes. 

1.4.  shall  not  knowingly  misrepresent  details  relating  to  analysis,  recommendations,  actions, 
or  other  professional  activities. 

1.3.  shall  not  engage  in  any  professional  conduct  involving  dishonesty  or  deception  or 
engage  in  any  act  that  reflects  negatively  on  their  integrity,  character,  trustworthiness, 
or  professional  ability  or  on  the  risk  management  profession. 

1.6.  shall  not  engage  in  any  conduct  or  commit  any  act  that  compromises  the  integrity  of 
GARP,  the  FRM®  designation,  or  the  integrity  or  validity  of  the  examinations  leading 
to  the  award  of  the  right  to  use  the  FRM  designation  or  any  other  credentials  that  may 
be  offered  by  GARP. 

1.7.  shall  be  mindful  of  cultural  differences  regarding  ethical  behavior  and  customs,  and 
avoid  any  actions  that  are,  or  may  have  the  appearance  of  being  unethical  according 
to  local  customs.  If  there  appears  to  be  a conflict  or  overlap  of  standards,  the  GARP 
Member  should  always  seek  to  apply  the  highest  standard. 

2.  Conflict  of  Interest 

GARP  Members  shall: 

2.1.  act  fairly  in  all  situations  and  must  fully  disclose  any  actual  or  potential  conflict  to  all 
affected  parties. 

2.2.  make  full  and  fair  disclosure  of  all  matters  that  could  reasonably  be  expected  to  impair 
independence  and  objectivity  or  interfere  with  respective  duties  to  their  employer, 
clients,  and  prospective  clients. 
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GARP  Members: 

3.1.  shall  not  make  use  of  confidential  information  for  inappropriate  purposes  and  unless 
having  received  prior  consent  shall  maintain  the  confidentiality  of  their  work,  their 
employer  or  client. 

3.2.  must  not  use  confidential  information  for  personal  benefit. 

4.  Fundamental  Responsibilities 

GARP  Members  shall: 

4. 1 . comply  with  all  applicable  laws,  rules,  and  regulations  (including  this  Code)  governing 
the  GARP  Members5  professional  activities  and  shall  not  knowingly  participate  or  assist 
in  any  violation  of  such  laws,  rules,  or  regulations. 

4.2.  have  ethical  responsibilities  and  cannot  outsource  or  delegate  those  responsibilities  to 
others. 

4.3.  understand  the  needs  and  complexity  of  their  employer  or  client,  and  should  provide 
appropriate  and  suitable  risk  management  services  and  advice. 

4.4.  be  diligent  about  not  overstating  the  accuracy  or  certainty  of  results  or  conclusions. 

4.5.  clearly  disclose  the  relevant  limits  of  their  specific  knowledge  and  expertise  concerning 
risk  assessment,  industry  practices,  and  applicable  laws  and  regulations. 

5 . Best  Practices 

GARP  Members  shall: 

5.1.  execute  all  services  with  diligence  and  perform  all  work  in  a manner  that  is  independent 
from  interested  parties.  GARP  Members  should  collect,  analyze  and  distribute  risk 
information  with  the  highest  level  of  professional  objectivity. 

5.2.  be  familiar  with  current  generally  accepted  risk  management  practices  and  shall  clearly 
indicate  any  departure  from  their  use. 

5.3.  ensure  that  communications  include  factual  data  and  do  not  contain  false  information. 

5.4.  make  a distinction  between  fact  and  opinion  in  the  presentation  of  analysis  and 
recommendations. 
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Violations  of  the  Code  of  Conduct 


LO  14.2:  Describe  the  potential  consequences  of  violating  the  GARP  Code  of 
Conduct. 


All  GARP  Members  are  expected  to  act  in  accordance  with  the  GARP  Code  of  Conduct  as 
well  as  any  local  laws  and  regulations  that  pertain  to  the  risk  management  profession.  If  the 
Code  and  certain  laws  conflict,  then  laws  and  regulations  will  take  priority. 

Violations  of  the  Code  of  Conduct  may  result  in  temporary  suspension  or  permanent 
removal  from  GARP  membership.  In  addition,  violations  could  lead  to  a revocation  of  the 
right  to  use  the  FRM  designation.  Sanctions  would  be  issued  after  a formal  investigation  is 
conducted  by  GARP. 


Professor's  Note:  There  are  no  Key  Concepts  for  this  short  topic. 
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Concept  Checkers 


1.  Over  the  past  two  days,  Lorraine  Quigley,  FRM,  manager  of  a hedge  fund,  has  been 
purchasing  large  quantities  of  Craeger  Industrial  Products’  common  stock  while  at 
the  same  time  shorting  put  options  on  the  same  stock.  Quigley  did  not  notify  her 
clients  of  the  trades  although  they  are  aware  of  the  fund’s  general  strategy  to  generate 
returns.  Which  of  the  following  statements  is  most  likely  correct?  Quigley: 

A.  did  not  violate  the  Code. 

B.  violated  the  Code  by  manipulating  the  prices  of  publicly  traded  securities. 

C.  violated  the  Code  by  failing  to  disclose  the  transactions  to  clients  before  they 
occurred. 

D.  violated  the  Code  by  failing  to  establish  a reasonable  and  adequate  basis  before 
making  the  trades. 

2.  Jack  Schleifer,  FRM,  is  an  analyst  for  Brown  Investment  Managers  (BIM).  Schleifer 
has  recently  accepted  an  invitation  to  visit  the  facilities  of  ChemCo,  a producer 

of  chemical  compounds  used  in  a variety  of  industries.  ChemCo  offers  to  pay  for 
Schleifer’s  accommodations  in  a penthouse  suite  at  a luxury  hotel  and  allow  Schleifer 
to  use  the  firms  private  jet  to  travel  to  its  three  facilities  located  in  New  York,  Hong 
Kong,  and  London.  In  addition,  ChemCo  offers  two  tickets  to  a formal  high -society 
dinner  in  New  York.  Schleifer  declines  to  use  ChemCo’s  corporate  jet  or  to  allow  the 
firm  to  pay  for  his  accommodations  but  accepts  the  tickets  to  the  dinner  (which  he 
discloses  to  his  employer)  since  he  will  be  able  to  market  his  firm’s  mutual  funds  to 
other  guests  at  the  dinner.  Has  Schleifer  violated  the  GARP  Code  of  Conduct? 

A.  Yes. 

B.  No,  since  he  is  using  the  gifts  accepted  to  benefit  his  employer’s  interests. 

C.  No,  since  the  gifts  he  accepted  were  fully  disclosed  in  writing  to  his  employer. 

D.  No,  since  the  gift  he  accepted  is  of  nominal  value  and  he  declined  to  accept  the 
hotel  accommodations  and  the  use  of  ChemCo’s  jet. 

3.  Beth  Bixby,  FRM,  oversees  a mid-cap  fund  that  is  required  to  invest  in  a minimum 
of  40  and  a maximum  of  60  different  issues.  Bixby  uses  a quantitative  approach  to 
actively  manage  the  assets.  In  promotional  materials,  she  states  that  “through  our 
complex  quantitative  approach,  securities  are  selected  that  have  similar  exposures 
to  a number  of  risk  factors  that  are  found  in  the  S&P  500  Index.  Thus  the  fund  is 
designed  to  track  the  performance  of  the  S&P  500  Index  but  will  receive  a return 
premium  of  between  2%  and  4%  according  to  our  model’s  risk-return  measures.” 
This  statement  is: 

A.  permissible  since  the  assertion  is  supported  by  modern  portfolio  theory  and 
estimates  from  the  firms’  model. 

B.  not  permissible  since  Bixby  is  misrepresenting  the  services  that  she  and/or  her 
firm  are  capable  of  performing. 

C.  not  permissible  since  Bixby  is  misrepresenting  the  investment  performance  she 
and/or  her  firm  can  reasonably  expect  to  achieve. 

D.  permissible  since  the  statement  describes  the  basic  characteristics  of  the  fund’s 
risk  and  return  objectives. 
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4.  Gail  Stefano,  FRM,  an  analyst  for  a U.S.  brokerage  firm  that  serves  U.S.  investors, 
researches  public  utilities  in  South  American  emerging  markets.  Stefano  makes  the 
following  statement  in  a recent  report:  “Based  on  the  fact  that  the  South  American 
utilities  sector  has  seen  rapid  growth  in  new  service  orders,  we  expect  that  most 
companies  in  the  sector  will  be  able  to  convert  the  revenue  increases  into  significant 
profits.  We  also  believe  the  trend  will  continue  for  the  next  three  to  five  years.”  The 
report  goes  on  to  describe  the  major  risks  of  investing  in  this  market,  in  particular 
the  political  and  exchange  rate  instability  associated  with  South  American  countries. 
Stefanos  report: 

A.  has  not  violated  the  Code. 

B.  violated  the  Code  by  failing  to  properly  distinguish  factual  information  from 
opinions. 

C.  violated  the  Code  by  recommending  an  investment  which  would  not  be  suitable 
for  all  of  its  clients. 

D.  violated  the  Code  by  failing  to  properly  identify  details  related  to  the  operations 
of  South  American  utilities. 

5.  Beth  Anderson,  FRM,  is  a portfolio  manager  for  several  wealthy  clients  including 
Reuben  Carlyle.  Anderson  manages  Carlyles  personal  portfolio  of  stock  and  bond 
investments.  Carlyle  recently  told  Anderson  that  he  is  under  investigation  by  the  IRS 
for  tax  evasion  related  to  his  business,  Carlyle  Concrete  (CC).  After  learning  about 
the  investigation,  Anderson  proceeds  to  inform  a friend  at  a local  investment  bank 
so  that  they  may  withdraw  their  proposal  to  take  CC  public.  Which  of  the  following 
is  most  likely  correct?  Anderson: 

A.  violated  the  Code  by  failing  to  immediately  terminate  the  client  relationship 
with  Carlyle. 

B.  violated  the  Code  by  failing  to  maintain  the  confidentiality  of  her  clients 
information. 

C.  violated  the  Code  by  failing  to  detect  and  report  the  tax  evasion  to  the  proper 
authorities. 

D.  did  not  violate  the  Code  since  the  information  she  conveyed  pertained  to  illegal 
activities  on  the  part  of  her  client. 
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Concept  Checker  Answers 


1 . A Quigleys  trades  are  most  likely  an  attempt  to  take  advantage  of  an  arbitrage  opportunity 

that  exists  between  Craeger’s  common  stock  and  its  put  options.  She  is  not  manipulating  the 
prices  of  securities  in  an  attempt  to  mislead  market  participants.  She  is  pursuing  a legitimate 
investment  strategy.  Participants  in  her  hedge  fund  are  aware  of  the  funds  investment 
strategy,  and  thus  Quigley  did  not  violate  the  Code  by  not  disclosing  this  specific  set  of 
trades  in  advance  of  trading  (Standards  2.1  and  5.1). 

2.  A GARP  Members  must  not  offer,  solicit,  or  accept  any  gift,  benefit,  compensation,  or 

consideration  that  could  be  reasonably  expected  to  compromise  their  own  or  another’s 
independence  and  objectivity.  Schleifer  has  appropriately  rejected  the  offer  of  the  hotel 
accommodations  and  the  use  of  ChemCos  jet.  However,  Schleifer  cannot  accept  the  tickets 
to  the  dinner.  Since  it  is  a formal  high-society  dinner,  the  tickets  are  most  likely  expensive  or 
hard  to  come  by.  Even  though  he  has  disclosed  the  gift  to  his  employer  and  he  plans  to  use 
the  dinner  as  a marketing  opportunity  for  his  firm,  the  gift  itself  may  influence  Schliefers 
future  research  in  favor  of  ChemCo.  Allowing  such  potential  influence  is  a violation  of 
Professional  Integrity  and  Ethical  Conduct  (Standard  1.2). 

3.  C It  is  not  reasonable  for  Bixby  to  expect  a 40-to-60  stock  mid-cap  portfolio  to  track  the  entire 

S&P  500  Index,  which  is  a large-cap  index.  She  should  know  that  there  will  be  periods  of 
wide  variance  between  the  performance  of  the  portfolio  and  the  S&P  500  Index.  There  is  no 
assurance  that  a premium  of  2%  to  4%  will  consistendy  be  obtained.  Bixby  is  in  violation  of 
Standard  1.4:  “GARP  Members  shall  not  knowingly  misrepresent  details  relating  to  analysis, 
recommendations,  actions,  or  other  professional  activities,”  since  she  has  made  an  implicit 
guarantee  of  the  funds  expected  performance. 

4.  A Historical  growth  can  be  cited  as  a fact  since  it  actually  happened.  Stefano  states  that  her  firm 

expects  further  growth  and  profitability  which  is  an  opinion.  She  does  not  claim  that  these 
are  facts.  Thus,  she  is  not  in  violation  of  Standard  5.4.  In  addition,  Stefano  identifies  relevant 
factors  and  highlights  in  particular  the  most  significant  risks  of  investing  in  South  American 
utilities.  She  has  fully  complied  with  Standard  5.3. 

5.  B Anderson  must  maintain  the  confidentiality  of  client  information  according  to  Standard 

3.1.  Confidentiality  may  be  broken  in  instances  involving  illegal  activities  on  the  part  of  the 
client,  but  the  clients  information  may  only  be  relayed  to  proper  authorities.  Anderson  did 
not  have  the  right  to  inform  the  investment  bank  of  her  client’s  investigation. 
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1.  A firm  has  determined  that  the  value  at  risk  (VaR)  of  its  investment  portfolio  is  $18 
million  for  one  day  at  a 95%  confidence  level.  Which  of  the  following  statements 
regarding  this  VaR  measure  is  correct? 

A.  There  is  a 95%  probability  that  the  portfolio  will  lose  $18  million  on  a given 
day. 

B.  There  is  a 95%  probability  that  the  portfolio  will  lose  no  more  than  $18  million 
on  a given  day. 

C.  There  is  a 5%  probability  that  the  portfolio  will  lose  $18  million  on  a given  day. 

D.  There  is  a 5%  probability  that  the  portfolio  will  lose  no  more  than  $18  million 

on  a given  day. 

2.  Over  a decade  ago,  Yasuo  Hamanaka,  the  lead  copper  trader  for  Sumitomo, 
attempted  to  corner  the  copper  market  in  a classic  market  manipulation  strategy. 
Such  lack  of  supervision  over  his  trading  activities  resulted  from  poor  internal 
controls.  Because  of  that  lack  of  supervision,  which  of  the  following  series  of 
transactions  was  he  able  to  engage  in  that  ultimately  resulted  in  a $2.6  billion 
trading  loss  for  Sumitomo? 

A.  Long  physical  copper,  short  futures  contracts,  bought  put  options. 

B.  Short  physical  copper,  long  futures  contracts,  sold  put  options. 

C.  Long  physical  copper,  long  futures  contracts,  sold  put  options. 

D.  Short  physical  copper,  short  futures  contracts,  bought  put  options. 

3.  In  1976,  Drysdale  Securities  was  able  to  borrow  $300  million  in  unsecured  funds 
from  Chase  Manhattan  Bank.  Drysdale  used  the  borrowed  funds  to  take  bond 
positions,  which  eventually  declined  in  value.  Given  the  loss  in  market  value, 
Drysdale  was  unable  to  repay  the  borrowed  funds  and  was  forced  into  bankruptcy. 
Which  firm  was  to  blame  for  this  financial  disaster? 

I.  Drysdale  Securities 
II.  Chase  Manhattan 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  I nor  II. 
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4.  Risk  metrics  aid  the  management  process  by  providing  managers  a target  to  achieve 
(e.g.,  a particular  VaR  level).  Monitoring  these  risk  metrics  allows  managers  to 
appropriately  manage  risk.  However,  risk  metrics  may  be  too  narrow  in  scope,  which 
can  make  it  more  difficult  to  achieve  the  overall  objective  of  managing  risk  in  an 
effort  to  create  value.  Which  of  the  following  statements  represents  a shortcoming/ 
misuse  of  VaR? 

I.  VaR  assumes  the  distributions  of  losses  are  correlated  over  time. 

II.  Choosing  a VaR  time  horizon  that  does  not  correspond  to  the  liquidity  of  the 
assets  in  the  portfolio  will  likely  lead  to  risk  mismeasurement. 

A.  I only. 

B.  II  only. 

C.  Both  I and  II. 

D.  Neither  1 nor  II. 

5.  An  analyst  has  estimated  that  the  returns  for  an  asset,  conditional  on  the 
performance  of  the  overall  economy,  are: 


Return 

Probability 

Economic  Growth 

5% 

20% 

Poor 

10% 

40% 

Average 

14% 

40% 

Good 

Also,  the  conditional  expected  returns  on  the  market  portfolio  are: 


Return  Probability  Economic  Growth 


2% 

20% 

Poor 

10% 

40% 

Average 

15% 

40% 

Good 

According  to  the  CAPM,  if  the  risk-free  rate  is  5%  and  the  risky  asset  has  a beta  of 

1.1,  with  respect  to  the  market  portfolio,  the  analyst  should: 

A.  sell  (or  sell  short)  the  risky  asset  because  its  expected  return  is  less  than 
equilibrium  expected  return  on  the  market  portfolio. 

B.  buy  the  risky  asset  because  the  analyst  expects  the  return  on  it  to  be  higher  than 
its  required  return  in  equilibrium. 

C.  sell  (or  sell  short)  the  risky  asset  because  its  expected  return  is  not  sufficient  to 
compensate  for  its  systematic  risk. 

D.  buy  the  risky  asset  because  the  analyst  expects  the  return  on  it  to  be  lower  than 
its  required  return  in  equilibrium. 

6.  Chrome  Fund  has  an  expected  return  of  12%.  Nickel  Fund  is  expected  to  provide 

an  excess  return  of  8%.  Standard  deviations  of  returns  are  5%  for  Chrome  Fund  and 

4%  for  Nickel  Fund.  The  risk-free  rate  is  2%.  Based  on  the  Sharpe  ratio,  a rational 

investor  should: 

A.  prefer  Chrome  Fund  to  Nickel  Fund. 

B.  prefer  Nickel  Fund  to  Chrome  Fund. 

C.  be  indifferent  between  Chrome  Fund  and  Nickel  Fund. 

D.  not  invest  in  either  Chrome  Fund  or  Nickel  Fund. 
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7.  A portfolio  manager  employs  a 2-factor  APT  model  to  calculate  expected  returns 
for  Portfolio  P.  The  two  factors  are  percentage  changes  in  GDP  and  changes  in  the 
term  structure  of  interest  rates,  defined  as  the  difference  between  yields  in  30-year 
Treasury  bonds  and  1 -year  Treasury  bills.  Assume  the  following  data: 


Risk-free  rate  = 4% 

GDP  factor  beta  = 2.00 

Term  structure  factor  beta  = 0.50 

GDP  risk  premium  = 6% 

Term  structure  risk  premium  = 5% 


Using  the  2-factor  APT  model  for  Portfolio  P,  which  of  the  following  expected 
returns  is  correct? 

A.  8.5%. 

B.  12.5%. 

C.  14.5%. 

D.  18.5%. 

8.  Data  consistency  is  important  to  ensure  that  there  are  no  clear  conflicts  in  data 
values  between  data  sets.  Which  of  the  following  types  of  data  consistency  refers  to 
consistency  between  one  set  of  data  values  and  another  set  within  the  same  record  at 
different  points  in  time? 

A.  Record  level. 

B.  Temporal  level. 

C.  Cross- record  level. 

D.  Cross-temporal  level. 

9.  Alan  Walters  is  a risk  manager  at  OneFirst  Bank.  He  has  recently  been  asked  to 
prepare  a risk  management  report  for  his  bank’s  board  of  directors.  The  board 
members  are  planning  to  utilize  this  report  to  make  critical  risk  management 
decisions  regarding  relevant  bank  risks.  Walters  assures  the  board  that  the  report  will 
be  accurate  and  complete  by  covering  all  material  risk  areas  within  the  organization. 
He  also  points  out  that  the  report  will  contain  meaningful  information  that  will  be 
applicable  to  all  employees  and  easily  understood  at  all  levels  of  the  organization. 
Walters  plans  on  distributing  the  risk  management  report  to  all  relevant  parties  while 
ensuring  confidentiality.  Which  of  the  following  effective  risk  data  aggregation  and 
risk  reporting  principles  set  forth  by  the  Basel  Committee  on  Banking  Supervision 
did  Walters  most  likely  violate? 

A.  Principle  7 — Accuracy. 

B.  Principle  8 — Comprehensiveness. 

C.  Principle  9 — Clarity  and  Usefulness. 

D.  Principle  11 — Distribution. 

10.  Will  Lambert,  FRM,  is  a financial  risk  analyst  for  Offshore  Investments.  He  is 
preparing  a purchase  recommendation  on  Burch  Corporation.  According  to  the 
GARP  Code  of  Conduct,  which  of  the  following  statements  about  disclosure  of 
conflicts  is  most  correct?  Lambert  would  have  to  disclose  that: 

A.  his  wife  owns  2,000  shares  of  Burch  Corporation. 

B.  Offshore  is  an  over-the-counter  market  maker  for  Burch  Corporation’s  stock. 

C.  he  has  a material  beneficial  ownership  of  Burch  Corporation  through  a family 
trust. 

D.  All  of  these  choices  require  disclosure. 
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1.  B The  VaR  of  this  investment  can  be  interpreted  as  either  (1)  there  is  a 95%  probability 

that  the  portfolio  will  lose  no  more  than  $18  million  on  a given  day  or  (2)  there  is  a 5% 
probability  that  the  portfolio  will  lose  more  than  $18  million  on  a given  day. 

(See  Topic  1) 

2.  C Hamanaka  established  a dominant  long  position  in  futures  contracts  and  simultaneously 

purchased  large  quantities  of  physical  copper.  As  well,  to  help  finance  his  long  copper 
positions,  he  even  sold  put  options  on  copper.  In  essence,  here  was  a “triple  long”  strategy 
that  would  only  pay  off  if  the  price  of  copper  or  copper  futures  increased.  At  the  same  time, 
there  was  a huge  risk  of  losses  should  the  prices  fall.  Unfortunately,  there  was  a continuation 
of  plummeting  copper  prices  after  other  copper  traders  began  selling  their  copper  holdings  in 
anticipation  of  Sumitomo  doing  the  same.  The  end  result  was  total  losses  of  $2.6  billion  for 
Sumitomo. 

(See  Topic  6) 

3.  C Clearly,  misleading  reporting  was  used  by  Drysdale  in  order  to  obtain  the  borrowed 

funds.  However,  Chase  Manhattan  was  partially  to  blame  for  assuming  that  it  was  simply 
the  middleman  in  the  transactions  and  the  positions  taken  had  a low  level  of  risk.  The 
inexperienced  managers  at  Chase  failed  to  realize  that  the  contract  wording  with  Drysdale 
indicated  that  Chase  would  be  held  responsible  for  any  payments  due. 

(See  Topic  6) 

4.  B One  misuse  of  VaR  is  choosing  a time  period  (e.g.,  daily  or  weekly)  that  does  not  correspond 

to  the  liquidity  of  the  assets  in  the  portfolio.  Using  daily  VaR  on  a portfolio  where  the  assets 
cannot  be  effectively  traded  within  a day  is  clearly  not  appropriate.  Taking  a longer  term 
horizon  to  account  for  liquidity  of  the  assets  may  not  be  sufficient  either.  VaR  assumes  the 
distributions  of  losses  are  not  correlated  over  time,  so  Statement  I is  incorrect.  A crisis  can 
change  the  nature  of  a return  distribution  for  a given  period  as  well  as  across  periods. 

(See  Topic  8) 

5.  C The  analyst's  forecast  of  the  expected  return  on  the  risky  asset  is  5(0.2)  + 10(0.4)  + 14(0.4) 

= 10.6%.  The  expected/equilibrium  return  on  the  market  portfolio  is  2(0.2)  + 10(0.4)  + 
15(0.4)  = 10.4%. 

The  CAPM  equilibrium  expected  return  (required  return  in  equilibrium)  on  the  risky  asset 
is  5 + 1.1(10.4  — 5)  = 10.94%.  Since  the  analyst’s  forecast  return  on  the  risky  asset  is  less 
than  its  required  return  in  equilibrium,  the  asset  is  overpriced  and  the  analyst  would  sell  if  he 
owned  it  and  possibly  sell  it  short. 

(See  Topic  9) 
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6.  C Excess  return  for  Chrome  is  12%  - 2%  = 10%.  Chrome’s  Sharpe  ratio  is  10%  / 5%  = 2.0. 

Excess  return  for  Nickel  is  given  as  8%.  Nickels  Sharpe  ratio  is  8%  / 4%  = 2.0.  An  investor 
should  be  indifferent  berween  these  two  funds  because  they  provide  the  same  expected  excess 
return  per  unit  of  risk. 

(See  Topic  10) 

7.  D E(Rp)  = 0.04  + 2(0.06)  + 0.5(0.05)  = 0.185  = 18.5% 

(See  Topic  1 1 ) 

8.  B Record  level  consistency  is  consistency  between  one  set  of  data  values  and  another  set  within 

the  same  record.  Temporal  level  consistency  is  consistency  between  one  set  of  data  values  and 
another  set  within  the  same  record  at  different  points  in  time. 

(See  Topic  12) 

9.  C Principle  9 requires  that  reports  be  tailored  to  the  end  user  (e.g.,  the  board,  senior  managers, 

and  risk  committee  members)  and  should  assist  them  with  sound  risk  management  and 
decision  making.  Walters  suggested  that  the  report  would  not  be  tailored  to  the  board 
because  the  report  was  going  to  be  applicable  to  all  employees  and  easily  understood  at 
all  levels  of  the  organization.  Principle  7 requires  that  risk  reports  should  be  accurate  and 
precise.  Board  members  should  be  able  to  use  the  reports  to  make  critical  decisions  about 
bank  risks.  Principle  8 requires  that  reports  should  contain  position  and  risk  exposure 
information  for  all  relevant  risks.  Principle  1 1 requires  that  reports  should  be  disseminated  in 
a timely  fashion  while  maintaining  confidentiality  where  required. 

(See  Topic  13) 

10.  D According  to  Standard  2.2,  GARP  Members  shall  make  full  and  fair  disclosure  of  all  matters 

that  could  reasonably  be  expected  to  impair  independence  and  objectivity  or  interfere  with 
respective  duties  to  their  employer,  clients,  and  prospective  clients. 

(See  Topic  14) 
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Beta, , c"(r;rm  ) 


capital  asset  pricing  model:  E(R|)  = RJ;  + Betaj[E(RM)  - R,;] 


capital  market  line:  E(RP)  = Rp  + 


E(Rm)~^f 


ap 


Topic  10 


Treynor  measure: 


E(Rp)-  Rp 

(3P 


Sharpe  measure: 


E(RP)-RF 


op 


Jensens  alpha:  ap  = E(Rp)  - Rf  - [E(RM)  - Rf]Pp 


C • • E(Rp)-  Rm:n 

Sortino  ratio:  — 1 mi— 

Vmsd~ 


information  ratio  = 


E(RP)  - E(Rb) 


ep 


Op_ 

% 


©2015  Kaplan,  Inc. 


Page  183 


Book  1 

Formulas 


Topic  11 

multifactor  model:  Rj  = E(Rj)  + + (3i2F?  + ...  + dikFk  + ei 

where: 

Rj  = return  on  stock  i 

E(Rj)  = expected  return  for  stock  i 

(3j.  - factor  beta  for  stock  i 

F-  = deviation  of  macroeconomic  factory  from  its  expected  value 
ej  = firm-specific  return  for  stock  i 


APT  model:  E(R) 


Rh  + Pll[E(R1)  - R,]  + Pi2[E(R2)  - R,]  +...+  3ik[E(Rk)  - Rf] 


Fama-French  three-factor  model: 

R,  - Rf  = otj  + 3uM(RM  - Rh)  + 3i.sMBSMB  + Pj.hmlHML  + ei 
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